📦 Celo Agent Skills — Celo智能体开发
v1.0.0端到端 Celo 开发脚本合集，集成 viem、thirdweb、Foundry，支持 USDC/USDT/USDm 付 Gas、MiniPay Mini Apps、稳定币接入及 ERC-8004 AI 代理支付体系。
0· 1.2k·0 当前·0 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This collection is a coherent Celo development playbook and appears benign, but take these precautions before using any instructions:
- Secrets: Examples show using PRIVATE_KEY and API keys. Never paste real private keys into example files or share them in chat. Use environment variables, secure secret stores, or hardware wallets, and rotate keys after testing.
- Deployment verification: Verification and deployment commands require private keys and API keys; only run them from a trusted environ...详细分析 ▾
✓ 用途与能力
The name/description (Celo development playbook) matches the actual contents: extensive guidance for viem, thirdweb, Foundry/forge/cast, stablecoins, MiniPay, contract verification, and agent payments. Examples, RPC endpoints, and token addresses are Celo-specific and expected for this purpose.
ℹ 指令范围
The SKILL.md files are developer-facing how-to instructions and remain within the stated domain (dApp UI, wallets, fee abstraction, smart contracts, verification). They include code snippets and CLI examples that reference private keys, env vars, and commands to deploy/verify contracts — appropriate for a dev playbook but potentially sensitive if followed without care. No instructions tell the agent to read unrelated system files or exfiltrate data to unexpected endpoints.
⚠ 安装机制
The skill itself has no install spec (instruction-only), which is low risk. However, the instructions recommend running common developer installers in-line — e.g., curl -L https://foundry.paradigm.xyz | bash && foundryup — which downloads and executes a remote script. That is a standard Foundry installation approach but is a high-risk action if executed blindly; users should verify the source before running such commands.
ℹ 凭证需求
The skill does not request environment variables or credentials at install time, which is good. The documentation repeatedly shows using PRIVATE_KEY, ETHERSCAN_API_KEY, NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID, and examples that embed '0xYourPrivateKey' or call vm.envUint('PRIVATE_KEY'). These are expected for deployment and verification workflows, but they are sensitive — the skill's declared requirements omit them, so users must supply secrets manually. This is proportionate to the purpose but worth highlighting as sensitive.
✓ 持久化与权限
always is false and user-invocable is true. The skill is instruction-only and does not request persistent privileges or attempt to modify other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/10
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install celo-agent-skills
镜像加速npx clawhub@latest install celo-agent-skills --registry https://cn.longxiaskill.com