web5 cli

Use when working with Web5 CLI tool for decentralized identity, CKB wallet, DID management, PDS data operations, account creation, posting, profile updates

What to consider before installing/running: 1) Source trust: the skill has no homepage and the registry owner is unknown — verify the npm 'web5-cli' package author and checksum before installing. 2) Sensitive files: the scripts and CLI will access and may write sensitive keys and tokens in ~/.web5-cli (signkey, ckb-sk, account.json). Back up and protect these files; consider running the workflow in a sandbox. 3) Prompt-injection: SKILL.md contains a detected base64-like block — inspect the full SKILL.md for any encoded text or hidden instructions and remove/clean them. 4) Run audit: review the included Python scripts yourself (they mostly call web5-cli and parse JSON; note minor bugs referencing undefined variables in error paths). 5) Least privilege: do not run as a privileged user; limit network exposure and validate the PDS host you pass to commands. If you are unsure about the package provenance or the encoded content, do not install or run these scripts.

Type: OpenClaw Skill Name: web5-cli Version: 0.1.2 The skill is classified as suspicious primarily due to the explicit plaintext storage of private keys for both DID signing and CKB wallet operations, as detailed in the `SKILL.md` file (`~/.web5-cli/signkey`, `~/.web5-cli/ckb-sk`). While the `SKILL.md` explicitly states this is a 'technical validation tool' and 'Do NOT use in production environments', operating with plaintext private keys is a critical vulnerability. The Python scripts (`scripts/create_account.py`, `scripts/destroy_account.py`) use `subprocess.run` to execute `web5-cli` commands, performing sensitive operations like creating/destroying accounts, sending transactions, and managing PDS data, all within this insecure key management context. Although the scripts themselves use `subprocess.run` with argument lists (mitigating direct shell injection from the script's own code), the overall reliance on a tool that stores keys in plaintext makes the entire skill bundle high-risk.