Zeko

Use when a user needs to actually use or build on Zeko: bridge with Bridge CLI or Bridge SDK, get testnet funds, find the right Zeko and Mina endpoints, run...

This skill appears internally consistent, but it will handle sensitive signing keys and a GitHub token. Only install if you trust the npm packages (@zeko-labs/* and o1js) and the skill publisher. Recommendations before installing: (1) use testnet or ephemeral keys, not your mainnet/private production keys; (2) limit GITHUB_TOKEN scopes to the minimum required for the faucet flow; (3) verify the npm packages' publisher and versions via the registry (and consider checksum/signature verification if available); (4) run the CLI commands in a controlled environment and review any local logs the CLI writes; (5) if you want additional assurance, inspect the installed package source code before providing real secrets.

Type: OpenClaw Skill Name: zeko Version: 0.0.1-main.4.1 The Zeko skill bundle is a legitimate developer tool for interacting with the Zeko protocol and Mina network. It provides instructions and code snippets for bridging assets, using faucets, and building zkApps using official-looking CLI tools (@zeko-labs/bridge-cli, @zeko-labs/faucet-cli) and the o1js library. While it requires sensitive environment variables like WALLET_PRIVATE_KEY and MINA_PRIVATE_KEY, these are necessary for its stated purpose of signing blockchain transactions, and there is no evidence of data exfiltration, malicious execution, or harmful prompt injection. All endpoints (e.g., zeko.io, minascan.io) and installation steps are consistent with the Zeko ecosystem.