360 Secure SkillHub
360 安全技能中心

Openclast Wallet

面向 Openclast/Openclaw 钱包的代理操作指南:用 openclast-wallet CLI 或宿主钱包工具完成钱包配置、余额查询、ERC20/合约调用与转账;所有发送操作先创建待审批交易,须用户明确批准后才广播;默认 notify 模式并校验限额、允许链与收款人;私钥仅存于 macOS 钥匙串,导出需环境门控与显式确认;确认后附区块浏览器链接。

fabriziogianni7
fabriziogianni7
热度 84.94
最近更新 2026-05-11 15:53:49
分类:安全依赖:代码执行 / 读写文件 / 第三方 API / MCP 服务应用场景:财务 / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add openclast-wallet
Metadata
name
openclast-wallet
description
Guides the agent in Openclast/Openclaw wallet usage, approvals, and safety rules. Use when users ask about wallet setup, balances, transactions, approvals, or key export.

Openclast Wallet Agent Guide

Quick start

  • Use the CLI to bootstrap:
    • openclast-wallet setup creates wallet-config.json in the current folder.
    • openclast-wallet setup --config ./wallet-config.json initializes the wallet from that file.
  • Prefer wallet-config.json in the project root and customize chains and limits before use.
  • Keep wallet-config.json separate from openclaw.json (Openclaw config does not accept a top-level wallets key).

Approval flow (mandatory)

All send/approve/contract operations create a pending transaction that requires explicit approval. Always:

  1. Create the pending tx (send/erc20/contract call).
  2. Ask the user to approve.
  3. Only after approval, broadcast and confirm.

If the user asks to “just send,” still require approval unless config is explicitly set to auto mode.

Key export warning (mandatory)

Never expose private keys by default. If the user asks for export:

  • Require explicit confirmation.
  • Warn that key export is dangerous and should be protected.
  • Use environment gates if available (e.g., MOLTBOT_ALLOW_WALLET_EXPORT=1) and explicit CLI confirmation.

If export is not supported in this host, say so and offer safer alternatives.

Common tasks

Balance and tokens

  • Use the correct chainId for the chain the user mentions.
  • If a chain is not configured, read-only balance may still be possible via well-known public RPCs.

Sending

  • Validate chainId and recipient.
  • Respect per-tx and daily limits from config.
  • Always provide a block explorer link when a tx is confirmed.

Chain name → chainId

  • Ethereum / Mainnet: 1
  • Sepolia: 11155111
  • Polygon: 137
  • Base: 8453
  • Arbitrum One: 42161

When the user says “balance on Sepolia” or “send on Ethereum,” always map to a chainId and proceed.

Safety defaults

  • Default mode is notify/approval, not auto-send.
  • Restrict unverified contracts when possible.
  • Store private keys only in OS keychain (macOS) and never in config.

Config rules (apply when present)

  • wallets.defaults.spending.mode: "notify" (default) or "auto" (sends without approval).
  • wallets.defaults.spending.limitPerTx, dailyLimit, allowedChains, allowedRecipients, notifyChannels: enforced for send/ERC20/contract calls.
  • wallets.notify.primaryChannel: where pending approvals are notified.
  • wallets.interactWithUnverifiedContracts: if false, only allow verifiedTokenAddresses and verifiedContractAddresses.

Block explorer links (mandatory)

After approval and broadcast, always include a tx link. Use:

  • /tx/<txHash> for transactions
  • /address/<address> for addresses

Base URL comes from wallets.chains.<chainId>.blockExplorerUrl when configured, otherwise fallback well-known explorers.

Agent tool expectations

If host tooling is available, prefer these tools:

  • wallet_send, wallet_balance, wallet_txStatus, wallet_approve
  • wallet_erc20_approve, wallet_erc20_transfer, wallet_contract_call

If the host provides CLI instead, use the host wallet CLI for create/address/send/approve and recover/import flows.

Files and CLI

  • Starter config: wallet-config.json
  • Install skill in project: openclast-wallet install-skill