circle-wallet

This skill appears to implement the Circle developer-controlled wallet functionality it advertises, but take these precautions before installing: - Verify the source: the package.json points to a GitHub repo (https://github.com/eltontay/clawhub_circle_wallet_skill). Inspect that repo or contact the author before trusting it in production. - Credentials: the tool requires a Circle API key and an entity secret. The registry metadata did not list these, but SKILL.md and the CLI use and store them. Expect these secrets to be saved in plaintext at ~/.openclaw/circle-wallet/config.json and wallets.json — restrict file permissions and avoid using high-privilege production keys until you trust the code. - Use sandbox first: test with CIRCLE_ENV=sandbox and sandbox API keys and the drip/testnet flows before using mainnet credentials or real funds. - Installation: you (or your admin) must run npm install in the skill folder (it depends on packages from npmjs.org). Review package-lock.json for dependency sources and versions if you have strict supply-chain requirements. - Least privilege & rotation: create limited Circle API keys when possible and rotate/revoke them if you stop using the skill. If you want a deeper assurance, ask the maintainer for a signed release, or have someone you trust audit the included source and the external @circle-fin dependency before granting production credentials.