📦 Golden Claw — 技能工具
v1.0.0[自动翻译] Manage GoldenClaw (GCLAW) on Solana. Create wallet, claim from faucet, check balance, send tokens, view history. For OpenClaw AI agents.
0· 565·0 当前·0 累计
by 安全扫描
OpenClaw
安全
medium confidenceThe skill's code, commands, and optional environment variables are consistent with a Solana SPL token wallet/faucet tool; there are no obvious signs of covert exfiltration or unrelated credential requests, but it performs runtime npm installs and stores encrypted wallet data locally so you should review wallet storage and run it in a sandbox before using real funds.
评估建议
This skill appears to do what it says: manage a GCLAW Solana wallet, claim and send tokens, and keep local state. Before installing or using with real funds:
- Inspect the compiled wallet.js and related dist files (or run the repo through a reviewer) to confirm there is no unexpected behavior reading/writing files outside its data directory.
- Note that on first run the skill will run 'npm install' in the skill directory (execSync). That downloads/compiles dependencies (e.g., argon2). If you pre...详细分析 ▾
✓ 用途与能力
The name/description (manage GCLAW on Solana: create wallet, claim, check balance, send tokens, view history) matches the included JS modules (wallet, balance, transactions, distribution, onchain-client). Optional env vars advertised (RPC URL, faucet URL, data dir, limits) align with functionality. The package description's phrasing about 'exchange services like API tokens and AI compute' is marketing/contextual but does not contradict the implemented wallet/distribution features.
ℹ 指令范围
SKILL.md and README instruct extracting the bundle and running npm build/install; the runtime entrypoint (dist/index.js) will automatically exec 'npm install' if node_modules is missing. The code reads/writes wallet and distribution state files under OPENCLAW_DATA_DIR (or user HOME/.openclaw by default) and interacts with Solana RPC and the configured faucet URL. There are no instructions that read unrelated system files or request unrelated credentials, but the skill will create and store encrypted wallet files and local JSON state (claimed-addresses, distribution-state, spending tracker) which is expected for this functionality.
ℹ 安装机制
There is no formal install spec in the registry metadata; however, dist/index.js will run 'npm install' via child_process.execSync at startup if dependencies are missing. This triggers network fetch and native builds (e.g., argon2 may compile). The packages are standard (solana/web3, spl-token, bip39, argon2, bs58) and are declared in package.json — this is coherent but increases runtime risk compared to an instruction-only skill because it performs package install operations at runtime.
✓ 凭证需求
The skill declares no required environment variables in the registry metadata. The README documents optional, sensible vars (GCLAW_TOKEN_MINT, SOLANA_RPC_URL, GCLAW_FAUCET_URL, OPENCLAW_DATA_DIR, donation address, and limits) that match the code's use. No unrelated cloud credentials or broad secrets are requested. The skill does rely on a runtime password from the user to decrypt the wallet (expected).
✓ 持久化与权限
The skill stores its own wallet and state files under an application-specific directory (OPENCLAW_DATA_DIR or HOME/.openclaw/gclaw-wallet). always is false and it does not request elevated or system-wide changes. It does not modify other skills' configurations. Autonomous invocation is allowed by default (not flagged on its own).
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/15
GoldenClaw (GCLAW) skill for Solana now available for OpenClaw AI agents. - Create an encrypted wallet and manage GCLAW tokens on Solana. - Claim GCLAW from the official faucet, view balances, transaction history, and spending limits. - Send and receive GCLAW tokens agent-to-agent, with easy access to address and donation options. - Provides commands for wallet setup, sending, claiming, checking balances, and tokenomics. - Includes full documentation and helpful links for faucet, website, token info, and social media.
● 可疑
安装命令
点击复制官方npx clawhub@latest install goldenclaw
镜像加速npx clawhub@latest install goldenclaw --registry https://cn.longxiaskill.com镜像同步中
技能文档
Solana SPL token skill for OpenClaw: wallet, faucet claims, and agent-to-agent transfers in GCLAW.
Installation
- Extract the skill to your
skills/folder - Run
npm run buildin the skill directory (dependencies are installed automatically when the skill runs if missing)
Commands
gclaw setup– Create encrypted walletgclaw claim– Claim GCLAW from faucet (goldenclaw.org)gclaw balance– GCLAW and SOL balancegclaw address– Your wallet addressgclaw send– Send GCLAW to another agentgclaw donate– Donate SOL to main wallet (treasury)gclaw history– Transaction historygclaw limits– Spending limitsgclaw tokenomics– Distribution stats
Links
- Faucet: https://goldenclaw.org
- Website: https://goldenclaw.org
- X: https://x.com/GClaw68175
- Token: Solscan