ClawHub

Elytro Smart Account CLI

v1.0.2

Entry point for the Elytro wallet skill plus the curated DeFi sub-skills. Start here before loading any individual protocol skill.

⭐ 0· 379·0 current·0 all-time
by@codeexplorer29
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The name/description (Elytro wallet + DeFi sub-skills) matches the instructions: it is an index/entrypoint that tells users/agents to install the Elytro CLI and load other skill files for specific protocols. Nothing requested in the document (no env vars, no unusual binaries) conflicts with that purpose.
ℹ
Instruction Scope
The SKILL.md stays on-topic: it documents workflow, which sub-skills to load, and install commands (npm install -g @elytro/cli, npx skills add ...). It does not instruct the agent to read arbitrary system files or to exfiltrate data. Note: it does instruct installing and fetching code from external sources (npm and GitHub raw URLs), which is expected for a CLI/skill pack but worth verifying before execution.
ℹ
Install Mechanism
There is no install spec in the registry bundle itself (instruction-only). The document recommends installing @elytro/cli from npm and adding a GitHub-hosted skills repo via npx. Those are normal for this use case, but installing packages from third-party npm packages or fetching raw GitHub content carries standard supply-chain risk and should be audited prior to installation.
✓
Credentials
The skill declares no required environment variables, no primary credentials, and no config path access. That is proportionate for an entrypoint/instruction file. The SKILL.md does not ask for secrets or unrelated credentials.
✓
Persistence & Privilege
always is false and there are no install hooks or modifications to other skills documented. disable-model-invocation is false (model can invoke it), which is the normal platform default; combined with the lack of extra privileges this is not an immediate concern.
Assessment
This SKILL.md is an index/guide and appears coherent, but it points you to installing third-party software (npm package @elytro/cli) and adding a GitHub-hosted repo. Before running those commands: 1) verify the npm package and GitHub repo authorship and recent activity, 2) inspect the CLI package source (or its GitHub repo) for unexpected postinstall scripts or network calls, 3) prefer installing in an isolated environment or container rather than globally on a sensitive machine, and 4) review any sub-skill SKILL.md files you add (they may pull in protocol-specific tooling). If you need higher assurance, ask the skill author for a verified homepage/repo and cryptographic release artifacts before installing.

Like a lobster shell, security has layers — review code before you run it.

latestvk974q0fd7z0dfrt11s82bks34h82xcgx

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments