📦 Emoji Today — 每日链上表情投票
v1.1.0让 AI 代理用 USDC 在 Base 链上为 emoji.today 的每日表情选举投票，支持 x402 微支付协议，需 Farcaster 账户与钱包。
0· 1.1k·1 当前·1 累计
by @bill-makes下载技能包
最后更新
2026/2/28
安全扫描
OpenClaw
安全
high confidenceThe skill's code, dependencies, and required environment variables align with its stated purpose (casting a $0.01 x402 onchain vote and optionally minting an NFT); nothing in the files indicates hidden or off-purpose behavior, but the skill requires a raw EVM private key so users should only use a disposable wallet with minimal funds.
评估建议
This skill appears to do what it says: sign a vote message and submit an x402-wrapped POST to emoji.today. Important cautions before installing or running: 1) EVM_PRIVATE_KEY is highly sensitive — do NOT use a mainnet wallet with significant funds. Create a dedicated wallet with only a tiny USDC balance (enough for the expected micropayments) and use that key. 2) The script loads .env files from multiple locations (scripts/.env, repo root, cwd), so avoid keeping other secrets in those .env files...详细分析 ▾
✓ 用途与能力
Name/description (onchain emoji vote via x402 on Base, tied to a Farcaster FID) match what the code does: signs a message with an EVM private key, wraps fetch calls with @x402/* to send micropayments, and POSTs to emoji.today endpoints. Required binaries (node) and npm deps (viem, @x402/*, dotenv) are appropriate for that purpose.
ℹ 指令范围
SKILL.md instructs installing deps, setting EVM_PRIVATE_KEY and FARCASTER_FID, and running the script to vote/mint. It also suggests posting about votes (manual sharing), and recommends fact-checking via web search. The runtime code only handles signing, x402-wrapped HTTP POSTs to emoji.today, and console output — it does not read or transmit unrelated system files. Note: the .env-loading behavior looks in multiple locations (scripts/.env, root .env, cwd) which will populate process.env with any values found there; the script itself only uses the declared env vars but loading multiple .env locations could unintentionally surface other secrets if present.
✓ 安装机制
Install uses npm packages declared in package.json (viem, dotenv, @x402/*). No downloads from arbitrary URLs or archive extraction. This is the expected, low-risk mechanism for a Node/JS script.
ℹ 凭证需求
The script requires EVM_PRIVATE_KEY and FARCASTER_FID — both are directly necessary: private key to sign messages and pay $0.01 USDC, FID to attribute votes. These are sensitive credentials (especially the private key). The number and type of env vars are proportionate, but users must understand that giving a raw private key grants signing/spending power for that wallet.
✓ 持久化与权限
The skill is not always-enabled, does not request persistent system modifications, and does not alter other skills or agent configuration. It can be invoked autonomously (platform default), which increases impact only insofar as the skill can spend the provided wallet funds — this is expected for this kind of skill.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.02026/2/9
- Renamed skill from "emoji-today" to "emoji-voter" and updated all identifiers accordingly. - Added skill version field (1.1.0) and updated metadata for clarity. - Expanded environment variable options: added `MINT_TO_ADDRESS` for directing NFT mints to a specific wallet. - Updated and clarified posting guidance: require fact-checking, prohibit multiple-platform variations, and emphasize authenticity. - Provided detailed minting instructions, including new command-line flags and environment variable options. - Improved documentation formatting and instructions throughout.
● 无害
安装命令
点击复制官方npx clawhub@latest install emoji-today
镜像加速npx clawhub@latest install emoji-today --registry https://cn.longxiaskill.com