← 返回 Skills 市场
306
总下载
1
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install walletconnect-requester
功能描述
Secure WalletConnect integration for AI agents. Connect to user wallets as a DApp (Proposer) without ever handling private keys. Request transactions and sig...
安全使用建议
This skill appears to do what it says: it implements a non‑custodial WalletConnect requester that never handles private keys and asks users to approve all actions. Before installing: (1) Verify WC_PROJECT_ID is obtained from WalletConnect Cloud and do not provide any private keys. (2) Review the included scripts/wc-requester.js yourself (or run in an isolated environment) and confirm the npm dependencies are acceptable—npm packages carry normal supply‑chain risk. (3) Use a dedicated wallet for agent interactions and review ~/.walletconnect-requester/audit.log and sessions.json regularly. (4) Note the registry metadata shows malformed env listing ([object Object])—confirm the actual required env is WC_PROJECT_ID as documented in SKILL.md.
功能分析
Type: OpenClaw Skill
Name: walletconnect-requester
Version: 1.0.2
The walletconnect-requester skill is a non-custodial Web3 integration tool designed to allow AI agents to request transactions and signatures that must be manually approved by a user via WalletConnect v2. The implementation in scripts/wc-requester.js correctly follows the WalletConnect DApp (Proposer) workflow, ensuring private keys never enter the agent's environment. It uses standard libraries (@walletconnect/sign-client), maintains local session persistence and audit logs in a dedicated home directory folder (~/.walletconnect-requester/), and contains no evidence of data exfiltration, malicious execution, or prompt-injection attacks.
能力评估
Purpose & Capability
The name/description (non‑custodial WalletConnect requester) matches the code and SKILL.md: the script implements a WalletConnect v2 proposer that requests transactions/signatures but does not access private keys. The only required secret is WC_PROJECT_ID. Note: registry metadata displayed as '[object Object]' for required env vars appears malformed, but SKILL.md clearly lists WC_PROJECT_ID and optional WC_METADATA_* variables.
Instruction Scope
SKILL.md directs the agent/user to set WC_PROJECT_ID, install standard WalletConnect Node libraries, run the included Node script, and interact via QR/URI. The instructions and the script's behavior (connect, request-tx, request-sign, sessions, disconnect) stay within the described purpose. The script persists session and audit files under ~/.walletconnect-requester as documented.
Install Mechanism
There is no packaged install spec; the SKILL.md instructs running npm install for three public npm packages (@walletconnect/* and qrcode). This is expected for a Node tool but carries normal npm supply-chain risk; the included code is also shipped with the skill (scripts/wc-requester.js), so no remote arbitrary-download install URLs are used.
Credentials
Only WC_PROJECT_ID (required) and optional metadata env vars are declared and used. No unrelated credentials, keys, or system tokens are requested. The script reads HOME to create ~/.walletconnect-requester, which is proportional to session persistence.
Persistence & Privilege
The skill persists sessions.json and audit.log under ~/.walletconnect-requester and will write files there; always:false (not force-included). This is reasonable for session management, but users should be aware session tokens are sensitive and audit logs, while masked, are persisted locally.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install walletconnect-requester - 安装完成后，直接呼叫该 Skill 的名称或使用
/walletconnect-requester触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
**1.0.2 changelog:**
- Added `metadata` section documenting required/optional environment variables, data persistence, and security notes.
- Security and privacy guidance improved, including file sensitivity levels, handling of WalletConnect URI and session tokens, and recommendations for file permissions.
- Clarified local data storage: `sessions.json` for session state, `audit.log` for transaction history (with masked sensitive data).
- No breaking changes to code or functionality; documentation now explicitly outlines storage location, audit practices, and handling of sensitive information.
v1.0.1
### walletconnect-requester 1.0.1
- Added detailed installation steps including dependency installation and project ID setup.
- Improved and clarified the "Quick Start" section for better onboarding.
- No changes to code or features—documentation only.
v1.0.0
walletconnect-requester 1.0.0
- Initial release of a non-custodial WalletConnect v2 integration for AI agents.
- Allows connecting to user wallets as a dApp (proposer), requesting transactions and signatures with user approval in their wallet.
- Never handles or stores private keys; users stay fully in control at all times.
- CLI commands to create sessions, request transactions/signatures, manage sessions, and configure permissions.
- Designed for maximum security with complete audit logging and minimal permissions by default.
元数据
常见问题
Walletconnect Requester 是什么？
Secure WalletConnect integration for AI agents. Connect to user wallets as a DApp (Proposer) without ever handling private keys. Request transactions and sig... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 306 次。
如何安装 Walletconnect Requester？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install walletconnect-requester」即可一键安装，无需额外配置。
Walletconnect Requester 是免费的吗？
是的，Walletconnect Requester 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Walletconnect Requester 支持哪些平台？
Walletconnect Requester 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Walletconnect Requester？
由 bevanding（@bevanding）开发并维护，当前版本 v1.0.2。
推荐 Skills