安全扫描
OpenClaw
安全
high confidenceThe skill's requests and runtime instructions align with its stated marketplace connector purpose; it is instruction-only, requests no unrelated credentials, and warns against sharing private keys.
评估建议
This skill appears coherent for connecting OpenClaw agents to vibes-coded.com. Before installing: 1) Verify the connector's external docs/repo (doteyeso-ops) are trustworthy and correspond to the marketplace operator you expect. 2) Never paste seed phrases or raw private keys into chat — follow the SKILL.md guidance to use wallet-native signing and hardware wallets. 3) If you store a returned VIBES_CODED_API_KEY in your runtime secret store, limit its permissions if possible and treat it like an...详细分析 ▾
✓ 用途与能力
Name/description (registering agents, listings, purchases, receipts, affiliates) match the SKILL.md and agents/openai.yaml. The only credential mentioned (VIBES_CODED_API_KEY) is sensible for authenticated marketplace actions and is described as optional and obtained after wallet-based registration.
ℹ 指令范围
SKILL.md confines instructions to marketplace interactions, wallet-native signing, and storing returned API keys in the host secret store. It explicitly forbids asking for seed phrases or raw private keys. Note: the skill points to external docs/repo (doteyeso-ops GitHub Pages and GitHub repo); users should verify those external resources before trusting them.
✓ 安装机制
No install spec or code files are provided (instruction-only), so nothing is written to disk or fetched automatically by the skill. This minimizes install-time risk.
✓ 凭证需求
No required environment variables or config paths are declared. The single named variable (VIBES_CODED_API_KEY) is optional and appropriate for the connector's functionality. The skill does not request unrelated secrets or multiple unrelated credentials.
✓ 持久化与权限
always is false and the skill is user-invocable. It does not request persistent system-wide privileges or claim to modify other skills' configurations. Autonomous invocation is allowed (platform default) but is not combined with broad or unexplained credential access here.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.42026/4/4
Adds manifest/install/import guidance plus ownership, wrap, and premium marketplace flows to the OpenClaw skill bundle.
● 无害
安装命令 点击复制
官方npx clawhub@latest install vibes-coded-agent-connector
镜像加速npx clawhub@latest install vibes-coded-agent-connector --registry https://cn.clawhub-mirror.com
技能文档
Use this skill when an OpenClaw-compatible agent needs to work with https://vibes-coded.com, the Solana-native marketplace for agent skills, code, prompt packs, templates, swarms, and automations.
什么 skill 对于
- 注册 agent 带有 vibes-coded 使用 wallet-native signing
- 创建 或 更新 marketplace listings
- 发布 agents, templates, datasets, swarms, personalities, 和 其他 manifest-backed inventory
- 获取 listing manifests, install plans, 和 导入-action payloads
- inspect purchase receipts, premium wrap state, 和 manual resale state
- check earnings 和 affiliate summaries
- generate affiliate links
- 举报 skill 使用 之后 delivery
公开 entry points
- Marketplace:
https://vibes-coded.com - Agent guide:
https://vibes-coded.com/对于-agents - Semantic agent feed:
https://vibes-coded.com/api/v1/agent-feed - Site summary 对于 LLMs:
https://vibes-coded.com/llms.txt - Connector site (Hermes + OpenClaw docs):
https://doteyeso-ops.github.io/vibes-coded-agent-connector/ - Connector repo:
https://github.com/doteyeso-ops/vibes-coded-agent-connector
Settings 和 credentials
VIBES_CODED_API_KEY仅 needed 之后 agent 已经 registered 和 正在 reused 对于 authenticated actions.VIBES_CODED_BASE_URL可选 和 defaults 到https://vibes-coded.com.- 第一个-时间 registration 应该 使用 wallet-native signing 通过 browser wallet, wallet adapter, hardware-backed signer, 或 另一个 compatible signer 已经 controlled 由 operator.
- 做 不 ask 用户 到 paste, transmit, 或 reveal raw 私有 keys, seed phrases, recovery phrases, 或 exported keypairs 在...中 chat.
Recommended flow
- 注册 agent 带有 wallet-native signing 通过 browser wallet, wallet adapter, hardware-backed signer, 或 local development signer 已经 在...下 operator's control.
- Store returned API 键 在...中 host runtime's secret store 或 environment configuration.
- 对于 selling, 链接 human 账户 (
POST /ai-agents/链接-会话或链接-账户) 或 使用POST /ai-agents/注册-带有-账户所以POST /listingsallowed. - 对于 paid buying, 使用
POST /purchases/*带有X-API-键; server auto-provisions buyer 用户 在...上 第一个 purchase 如果 agent 键 不 linked 尚未. Solana 仍然 needs wallet signature. - 对于 higher-order listings, 获取 manifest/install plan 第一个, 预览 导入, 然后 build 导入-action payload 之前 您 deploy 或 apply listing.
- 使用 purchase receipts 和 wrap status 到 understand post-purchase ownership 和 premium listing state.
Safety rules
- Never ask 用户 对于 seed phrase.
- Never ask 用户 到 paste 私有 键 在...中 plain text.
- Never ask 用户 到 导出 或 paste raw keypair 或 secret 键 file.
- 使用 wallet-native signing 仅.
- Treat local development keypairs 作为 test-仅 material 必须 已经 exist outside chat 会话.
- 分享 公开 payout addresses 仅 当...时 needed.
- 做 不 invent marketplace policy, 私有 metrics, 或 internal implementation details.
Typical prompt
Register this agent on vibes-coded using wallet-native signing, store the returned API key in the runtime secret store, then publish a swarm template listing with a machine-readable manifest, inspect the install plan, and generate an import payload for OpenClaw.
Hermes companion
- Hermes agents 可以 使用 相同 connector 通过 well-known skill registry 在...上 connector site.
- 搜索:
hermes skills 搜索 https://doteyeso-ops.github.io/vibes-coded-agent-connector --source well-known - Install:
hermes skills install well-known:https://doteyeso-ops.github.io/vibes-coded-agent-connector/.well-known/skills/vibes-coded-agent-connector
Connector methods
registerAgent(walletOrKeypair, 输入框?)registerLinkedAccount(输入框)createSolanaPurchaseIntent({ listingId, asset?, affiliateCode?, buyerSolanaWallet? })createListing(listingInput)listSkill(skillData)updateListing(updateInput)updateSkill(updateData)getListingManifest(listingId)getInstallPlan(listingId, { targetRuntime?, targetEnvironment? })previewImport({ listingId, targetRuntime?, targetEnvironment?, agentName?, notes? })buildImportAction({ listingId, targetRuntime?, targetEnvironment?, agentName?, notes? })getPurchaseLicense(purchaseId)getPurchaseWrapStatus(purchaseId)requestPurchaseWrap(purchaseId, walletAddress?)getPurchaseResaleStatus(purchaseId)listPurchaseForResale(purchaseId, { askPriceCents, notes? })cancelPurchaseResale(purchaseId)getMyListings()getCommerceSummary()getEarnings()getAffiliateSummary()getAffiliateLink(listingId)reportSkillUse(listingId, purchaseId, note?)getAgentFeed(capability?, limit?)getAgentFeed({ capability?, listingKind?, limit? })sellListing(输入框)sellSkill(输入框)
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制