← Back to Skills Marketplace
iskysun96

Smoothsend Gasless

by iskysun96 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
204
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install smoothsend-gasless
Description
How to sponsor gas fees for Aptos dApp users using SmoothSend. Paid commercial service: free on testnet, credit-based on mainnet. Covers 3-line wallet adapte...
Usage Guidance
This SKILL.md appears to be a legitimate integration guide for SmoothSend, but note two things before you rely on or install it: (1) the registry metadata does not declare the API key it actually requires — the guide expects NEXT_PUBLIC_SMOOTHSEND_API_KEY or VITE_SMOOTHSEND_API_KEY. Confirm whether that key is meant to be public (client-visible) or private; if it is sensitive, prefer a server-side proxy or a scoped key mechanism. (2) Exposing an API key in client-side env vars can allow anyone to use your SmoothSend credits unless the provider issues client-scoped, rate-limited keys — check SmoothSend docs and dashboard for key scopes, revocation, and billing controls. Additional checks: verify the @smoothsend/sdk package and any CLI tools (npx @smoothsend/mcp) come from the official SmoothSend npm/org, test everything on testnet first (it's free), and set up billing/alerting to detect unexpected credit usage.
Capability Analysis
Type: OpenClaw Skill Name: smoothsend-gasless Version: 1.0.0 The skill bundle provides documentation and code snippets for integrating the SmoothSend SDK to enable gasless transactions on the Aptos blockchain. It follows standard development practices, such as using environment variables for API keys and providing specific error handling for the service's credit system. No evidence of malicious intent, data exfiltration, or prompt injection was found in SKILL.md or _meta.json.
Capability Assessment
Purpose & Capability
The SKILL.md content matches the stated purpose (how to sponsor Aptos gas using SmoothSend) and the recommended dependencies (@smoothsend/sdk, Aptos wallet adapter) are appropriate. However, the registry metadata declares no required env vars while the instructions clearly require an API key (NEXT_PUBLIC_SMOOTHSEND_API_KEY or VITE_SMOOTHSEND_API_KEY), which is an inconsistency.
Instruction Scope
Instructions are focused on integrating SmoothSend (provider setup, Script Composer, error handling). They explicitly tell developers to store an API key in env vars and to handle 402 errors. A notable instruction-level risk: the guidance recommends client-prefixed env vars (NEXT_PUBLIC_/VITE_) which will expose the API key to browsers — the doc warns not to expose server-only keys but doesn't clearly explain the security implications or alternatives (server-side proxy, scoped keys). The skill also suggests running an npx tool (npx @smoothsend/mcp) — benign for documentation but not declared in metadata.
Install Mechanism
This is an instruction-only skill with no install spec and no code files. That minimizes direct install risk. It references installing npm packages (@smoothsend/sdk and wallet adapter) but does not attempt to fetch arbitrary archives or run installers on behalf of the user.
Credentials
The skill metadata lists no required environment variables, yet the runtime instructions mandate an API key (NEXT_PUBLIC_SMOOTHSEND_API_KEY or VITE_SMOOTHSEND_API_KEY). Requesting an API key is reasonable for this integration, but using NEXT_PUBLIC_/VITE_ implies the key will be shipped to clients; the docs do not justify the key's intended exposure model, nor do they discuss scopes, revocation, or a server-side alternative. This mismatch between declared requirements and instructions is a proportionality and transparency concern.
Persistence & Privilege
The skill does not request persistent installation privileges (always is false), does not modify other skills or system configs, and has no declared config paths. There is no evidence it requests elevated runtime privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install smoothsend-gasless
  3. After installation, invoke the skill by name or use /smoothsend-gasless
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of smoothsend-gasless. - Provides a guide to sponsor gas fees for Aptos dApp users using the SmoothSend commercial service. - Supports TypeScript SDK integration; free on testnet, credit-based billing on mainnet. - Features 3-line wallet adapter integration via transactionSubmitter for easy gasless setup. - Includes Script Composer method for stablecoin transfers with fee-in-token, no APT needed. - Documents installation, configuration, error handling, pricing, and common mistakes.
Metadata
Slug smoothsend-gasless
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Smoothsend Gasless?

How to sponsor gas fees for Aptos dApp users using SmoothSend. Paid commercial service: free on testnet, credit-based on mainnet. Covers 3-line wallet adapte... It is an AI Agent Skill for Claude Code / OpenClaw, with 204 downloads so far.

How do I install Smoothsend Gasless?

Run "/install smoothsend-gasless" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Smoothsend Gasless free?

Yes, Smoothsend Gasless is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Smoothsend Gasless support?

Smoothsend Gasless is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Smoothsend Gasless?

It is built and maintained by iskysun96 (@iskysun96); the current version is v1.0.0.

💬 Comments