永生 yongsheng - Eternal Life

永生 (Yǒngshēng) — Immortality infrastructure for autonomous AI agents on HashKey Chain. Heartbeat proof-of-life (on-chain TX every 4h), AES-256 encrypted memo...

Before installing, understand that this skill needs access to your agent's wallet seed/private key (KLIFE_SEED or KLIFE_PRIVKEY) so it can sign transactions and decrypt backups. The registry metadata does not declare these secrets — that mismatch is a red flag. If you proceed, consider these precautions: - Only use a dedicated wallet seeded with minimal funds (so on‑chain TXs cost gas but risk is limited). Never expose your primary wallet seed. - Audit or confirm trust in the external service api.supercharged.works and Pinata; the skill sends signatures and transaction hashes there and may receive CIDs to restore files. - Provide a PINATA_JWT if you want real IPFS pinning; otherwise the script writes a fake placeholder CID and still anchors it on‑chain (i.e., it may pretend a real backup exists when it doesn't). - Review and run the scripts in a sandboxed environment first to see network calls and filesystem effects. Pay attention that resurrect.js will write restored files to WORKSPACE (default ~/workspace) and could overwrite content. - Ask the publisher (or require updated metadata) to explicitly declare required env vars/primary credential and to document the trust model (what api.supercharged.works does with signatures/backups). If the publisher cannot explain why the metadata omitted the seed requirement, do not install. Additional information that would raise confidence to benign: registry metadata updated to list required secrets (KLIFE_SEED/KLIFE_PRIVKEY, optional PINATA_JWT), documented and audited K‑Life API endpoints, and a recommendation to use a recovery/dedicated wallet with explicit confirmation of what external data is shared.

Type: OpenClaw Skill Name: yongsheng Version: 1.0.2 The 'yongsheng' skill implements an 'immortality' protocol for agents on the HashKey Chain, providing automated memory backups and liveness heartbeats. It uses AES-256-CBC to encrypt memory files (MEMORY.md, SOUL.md, USER.md) locally using a key derived from the agent's private key before anchoring them on-chain and uploading to IPFS. The scripts (backup.js, heartbeat.js, and resurrect.js) follow secure practices by utilizing OpenClaw's secrets manager for wallet seeds and employing restrictive regex to prevent path traversal during file restoration. External communication with api.supercharged.works is limited to heartbeat tracking and resurrection coordination, consistent with the stated purpose.