360 Secure SkillHub
360 安全技能中心

Authenticate Wallet

该 Skill 指导使用 npx awal@latest CLI 完成支付钱包的邮箱 OTP 认证:先执行 auth login 发送验证码并返回 flowId,再执行 auth verify 完成登录;也可检查状态和查看地址、余额。所有命令支持 --json。

0xrag
0xrag
热度 63.71
最近更新 2026-05-18 12:01:11
分类:安全依赖:代码执行 / 第三方 API应用场景:财务 / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add authenticate-wallet
Metadata
name
authenticate-wallet
description
Sign in to the wallet. Use when you or the user want to log in, sign in, connect, or set up the wallet, or when any wallet operation fails with authentication or "not signed in" errors. This skill is a prerequisite before sending, trading, or funding.
user-invocable
true
disable-model-invocation
false
allowed-tools
["Bash(npx awal@latest status*)","Bash(npx awal@latest auth *)","Bash(npx awal@latest balance*)","Bash(npx awal@latest address*)","Bash(npx awal@latest show*)"]

Authenticating with the Payments Wallet

When the wallet is not signed in (detected via npx awal status or when wallet operations fail with authentication errors), use the npx awal CLI to authenticate.

If you have access to email, you can authenticate the wallet yourself, otherwise you'll need to ask your human to give you an email address and to tell you the OTP code they receive.

Authentication Flow

Authentication uses a two-step email OTP process:

Step 1: Initiate login

npx awal@latest auth login <email>

This sends a 6-digit verification code to the email and outputs a flowId.

Step 2: Verify OTP

npx awal@latest auth verify <flowId> <otp>

Use the flowId from step 1 and the 6-digit code from the user's email to complete authentication. If you have the ability to access the user's email, you can read the OTP code, or you can ask your human for the code.

Checking Authentication Status

npx awal@latest status

Displays wallet server health and authentication status including wallet address.

Example Session

# Check current status
npx awal@latest status

# Start login (sends OTP to email)
npx awal@latest auth login user@example.com
# Output: flowId: abc123...

# After user receives code, verify
npx awal@latest auth verify abc123 123456

# Confirm authentication
npx awal@latest status

Available CLI Commands

Command Purpose
npx awal@latest status Check server health and auth status
npx awal@latest auth login <email> Send OTP code to email, returns flowId
npx awal@latest auth verify <flowId> <otp> Complete authentication with OTP code
npx awal@latest balance Get USDC wallet balance
npx awal@latest address Get wallet address
npx awal@latest show Open the wallet companion window

JSON Output

All commands support --json for machine-readable output:

npx awal@latest status --json
npx awal@latest auth login user@example.com --json
npx awal@latest auth verify <flowId> <otp> --json