Trustless Workflow Automation on EVM networks for Agents (powered by Ditto Network)

Creates, configures, and deploys on-chain automation workflows using the Ditto Network SDK. Use when the user asks to "create a workflow", "automate on-chain...

This skill appears to implement Ditto network workflow deployment, but the SKILL.md requires you to provide a wallet PRIVATE_KEY and to upload workflow data to a specific Ditto IPFS endpoint — while the registry metadata lists no required environment variables or source homepage. Before installing or following these instructions: - Do NOT paste or store your main wallet private key into a .env on a machine you don't fully control. Prefer using a hardware wallet, a wallet-provider signing flow, or a temporary/testnet key. - Treat the requirement to supply a raw PRIVATE_KEY as sensitive. If you must test, use an ephemeral account with minimal funds on a testnet. - Verify the skill's provenance: find the official Ditto SDK repository and confirm the executor address and IPFS endpoint match official docs. The SKILL.md points to a GitHub repo, but the registry has no homepage — confirm the repo and author are legitimate. - Review the SDK code (and any session-permission generation) yourself or with an auditor to ensure the session keys grant only the minimal, expected permissions. - Confirm where any signed data or workflow metadata is uploaded (the specified IPFS_SERVICE_URL) and whether that service requires additional trust. Given the mismatch between declared requirements and the actual instructions plus unknown source, proceed cautiously; if uncertain, ask the publisher for an explicit explanation of why PRIVATE_KEY is not listed in the registry and request a verifiable homepage or repository link before use.

Type: OpenClaw Skill Name: workflow-automation-evm-wallets Version: 1.0.1 The skill bundle facilitates on-chain automation by requiring the user's 'PRIVATE_KEY' and directing the agent to execute generated TypeScript code via 'ts-node'. It mandates the use of a specific external endpoint (https://ipfs-service.dittonetwork.io) and includes restrictive instructions in SKILL.md that forbid the agent from reading external SDK documentation, which is a form of context-limiting prompt control. While these capabilities are plausibly required for the stated purpose of deploying blockchain workflows, the combination of sensitive credential handling and arbitrary code execution represents a high-risk surface.