Near Faucet
v1.0.0OpenClaw skill for requesting NEAR testnet tokens via faucet. Provides faucet requests, status checking, and balance queries with rate limiting.
⭐ 0· 886·0 current·0 all-time
by@shaiss
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description match the implementation: the script POSTs to wallet.testnet.near.org/api/faucet to request tokens and uses rpc.testnet.near.org to query balances. No unrelated services, binaries, or credentials are requested.
Instruction Scope
SKILL.md describes CLI commands that align with the code, but it claims local rate limiting ('1 request per account per 24 hours') and a request queue; the included script contains no local rate-limiting or queue logic—rate limiting may be enforced server-side. SKILL.md also documents an optional NEAR_ACCOUNT env var, but the script never reads it. Otherwise instructions are narrow and scoped to faucet/balance operations.
Install Mechanism
This is instruction-only with bundled JS source and package.json; there is no external download/install step, no archive extraction, and no third-party package installation declared. Nothing writes arbitrary remote code during install.
Credentials
The skill declares no required environment variables or credentials (good). SKILL.md mentions NEAR_ACCOUNT as an optional env var, but it's not declared or used by the script—minor documentation/code mismatch. No secrets or unrelated credentials are requested.
Persistence & Privilege
always is false and the skill does not request system-wide configuration changes or access to other skills' credentials. It does not persist additional privileged state or modify other skills.
Assessment
This skill appears coherent and low-risk: it only posts to NEAR testnet endpoints and does not request secrets. Before installing, you may (1) review scripts/faucet.js yourself (it is short and readable), (2) confirm the endpoint wallet.testnet.near.org is acceptable for your use, and (3) run it in a sandbox or with a throwaway test account to verify behavior. Be aware the README/SKILL.md claims local rate-limiting and an NEAR_ACCOUNT env var that the script does not implement—rate limits are likely enforced by the faucet server, and the env var is only documentation. If you require stronger guarantees about rate-limiting or auditing, request those features from the author or implement local checks before using the skill autonomously.Like a lobster shell, security has layers — review code before you run it.
latestvk975sv1xzfxf33z58mb7dy95fx80s4c1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.