← 返回 Skills 市场
Virtuals
作者
rojasjuniore
· GitHub ↗
· v1.0.0
1126
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install virtuals
功能描述
Virtuals Protocol integration for OpenClaw. Create, manage and trade tokenized AI agents on Base.
安全使用建议
Before installing or running this skill: (1) Confirm the source/trustworthiness — registry metadata lists source as unknown and no homepage, even though SKILL.md references virtuals.io. Prefer skills with verifiable upstream repos. (2) Do not paste your mainnet private key into the CLI unless you understand the risk — the skill stores the key in plaintext JSON at ~/.openclaw/virtuals/config.json (file perms 600). Use a throwaway/test wallet or hardware/external signer if possible. (3) Verify whether you intend to work on testnet or mainnet — SKILL.md warns 'TESTNET ONLY' but the code points to mainnet.base.org and a mainnet contract address; this mismatch could cause accidental mainnet transactions and fund loss. (4) Inspect/verify the contract addresses and RPC endpoints hard-coded in the code before using trading/creation commands. (5) If you need full assurance, ask the publisher for source provenance or request that the skill implement secure signing (external signer/hardware-wallet integration) and explicitly support a testnet RPC option.
功能分析
Type: OpenClaw Skill
Name: virtuals
Version: 1.0.0
The skill is classified as suspicious primarily due to its capability to store a user-provided private key on disk in `~/.openclaw/virtuals/config.json` via the `virtuals config --private-key <key>` command (documented in SKILL.md and implemented in src/cli.ts). While the code attempts to secure this file with `chmodSync(CONFIG_FILE, 0o600)` and the SKILL.md explicitly warns 'TESTNET ONLY for now - Don't use mainnet funds', storing private keys on disk is an inherently high-risk practice. The current implementation of the `create` command in `src/cli.ts` does not yet use the private key for on-chain transactions, directing users to a website instead, which prevents an immediate 'malicious' classification, but the risky capability remains.
能力评估
Purpose & Capability
Name/description claim a Virtuals Protocol CLI for Base L2 and the code implements exactly that (ethers.js, Base RPC, token contract address, market data). However SKILL.md contains a '⚠️ TESTNET ONLY for now' warning while the code uses BASE_RPC = 'https://mainnet.base.org' and a contract address labelled 'Base Mainnet' — this is an inconsistency that could cause users to unintentionally operate on mainnet.
Instruction Scope
Runtime instructions and code only perform CLI operations (price, agents list, balance, create, config). The config command stores wallet address and private key in ~/.openclaw/virtuals/config.json and the code reads/writes that file. There are no instructions that exfiltrate data to unknown endpoints, but storing private keys locally (even with file perms) is sensitive and the SKILL.md encourages configuring a private key. The code also attempts to call https://api.virtuals.io and coingecko; these network calls are expected for the stated purpose.
Install Mechanism
No remote archive downloads or obscure installers. The repo uses standard npm dependencies (axios, ethers, commander) and the SKILL.md instructs npm install && npm run build && npm link — a normal Node.js install flow. package-lock.json lists public npm packages.
Credentials
The skill requests no environment variables, which is consistent, but it requires the user to provide a private key via the CLI which is then stored in plaintext JSON at ~/.openclaw/virtuals/config.json (file mode set to 0o600). While a private key is needed to sign transactions, storing it unencrypted in a skill-managed file is sensitive and not clearly justified; the skill does not offer alternative secure signing methods (e.g., hardware wallet, external signer, or encrypted keystore).
Persistence & Privilege
The skill does not request always:true and does not modify other skills. It creates a config directory under the user's home (~/.openclaw/virtuals) and persists configuration there — normal for a CLI but worth noting since it stores sensitive keys locally.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install virtuals - 安装完成后，直接呼叫该 Skill 的名称或使用
/virtuals触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release - Virtuals Protocol integration
元数据
常见问题
Virtuals 是什么？
Virtuals Protocol integration for OpenClaw. Create, manage and trade tokenized AI agents on Base. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1126 次。
如何安装 Virtuals？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install virtuals」即可一键安装，无需额外配置。
Virtuals 是免费的吗？
是的，Virtuals 完全免费（开源免费），可自由下载、安装和使用。
Virtuals 支持哪些平台？
Virtuals 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Virtuals？
由 rojasjuniore（@rojasjuniore）开发并维护，当前版本 v1.0.0。
推荐 Skills