moltycash — 技能 — openclaw中文资讯站

技能详情（站内镜像，无评论）

Send USDC to molty users via A2A protocol. Use when the user wants to send cryptocurrency payments, tip someone, or pay a molty username.

数据与表格

许可证：MIT-0

MIT-0 ·免费使用、修改和重新分发。无需归因。

版本：v2.0.0

统计：⭐ 0 · 802 · 3 current installs · 3 all-time installs

⭐ 0

安装量（当前） 3

🛡 VirusTotal ：良性 · OpenClaw ：可疑

Package：0xsnackbaker/moltycash

安全扫描（ClawHub）

VirusTotal ：良性
OpenClaw ：可疑

OpenClaw 评估

The skill's instructions require private wallet keys and use npm/npx, but the registry metadata declares no required env vars or binaries—an inconsistency that warrants caution before installing or running it.

目的

The skill's stated purpose (sending USDC via molty.cash) legitimately requires wallet private keys and a client binary. However, the registry metadata lists no required environment variables and no required binaries, while SKILL.md explicitly requires EVM_PRIVATE_KEY or SVM_PRIVATE_KEY and expects npm/npx to run an npm package. This mismatch between declared requirements and runtime instructions is incoherent.

说明范围

The SKILL.md instructions are focused on sending payments and only ask for wallet private keys and an optional identity token. They instruct storing credentials at ~/.openclaw/.env and using npx/npm to run the moltycash package. The actions described are directly related to the payment task, but they grant the skill access to raw private keys and suggest running code fetched from npm—both high-sensitivity operations that should be verified.

安装机制

There is no install spec in the registry, but the docs instruct using npx or npm install -g, which will fetch code from the npm registry at runtime. The absence of an explicit install provenance or pinned package source in the skill metadata combined with a run-via-npx workflow increases risk (you'd be executing remote package code on demand).

证书

The only secrets requested (EVM_PRIVATE_KEY, SVM_PRIVATE_KEY, optional MOLTY_IDENTITY_TOKEN) are proportionate to a crypto-payments tool. However, the registry metadata failing to declare these env vars is inconsistent. Storing private keys in plaintext environment files is also risky; the skill's suggestion to place them in ~/.openclaw/.env is reasonable for convenience but requires careful operational security (use file permissions, hardware…

持久

The skill is not forced-always and is user-invocable. It does not request elevated platform privileges and instructs placing credentials in its own OpenClaw config path (~/.openclaw/.env). There is no indication it modifies other skills or requires persistent platform-wide changes.

安装（复制给龙虾 AI）

将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。

请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「moltycash」。简介：Send USDC to molty users via A2A protocol. Use when the user wants to send cryp…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/0xsnackbaker/moltycash/SKILL.md
（来源：yingzhi8.cn 技能库）

SKILL.md

打开原始 SKILL.md（GitHub raw）

---
name: moltycash
description: Send USDC to molty users via A2A protocol. Use when the user wants to send cryptocurrency payments, tip someone, or pay a molty username.
license: MIT
metadata:
  author: molty.cash
  version: "2.0.0"
compatibility: Requires EVM_PRIVATE_KEY (Base) or SVM_PRIVATE_KEY (Solana) environment variable
---

# moltycash

Send USDC to any [molty.cash](https://molty.cash) user from the command line. Supports Base and Solana via the [x402](https://x402.org) protocol.

## Quick Start

Set up your private key:

```bash
# For Base
export EVM_PRIVATE_KEY="your_base_private_key"

# For Solana
export SVM_PRIVATE_KEY="your_solana_private_key"
```

Send your first payment:

```bash
npx moltycash send KarpathyMolty 1¢
```

## Install

```bash
# Run directly (recommended)
npx moltycash --help

# Or install globally
npm install -g moltycash
```

## Usage

```bash
npx moltycash send <molty_name> <amount> [--network <base|solana>]
```

### Examples

```bash
npx moltycash send KarpathyMolty 1¢
npx moltycash send KarpathyMolty 0.5
npx moltycash send KarpathyMolty 0.5 --network solana
```

### Amount formats

| Format | Example | Value |
|--------|---------|-------|
| Cents | `50¢` | $0.50 |
| Dollar | `$0.50` | $0.50 |
| Decimal | `0.5` | $0.50 |

## Environment variables

| Variable | Description |
|----------|-------------|
| `EVM_PRIVATE_KEY` | Base wallet private key (`0x...`) |
| `SVM_PRIVATE_KEY` | Solana wallet private key (base58) |
| `MOLTY_IDENTITY_TOKEN` | Optional — appear as verified sender |

If only one key is set, that network is used automatically. If both are set, use `--network`.

## Verified Sender (Optional)

Include your identity token to appear as a verified sender in transaction history.

1. Login to molty.cash with your X account
2. Open the profile dropdown and click "Identity Token"
3. Generate your token and copy it
4. Store it as `MOLTY_IDENTITY_TOKEN` environment variable

Verified senders appear with a checkmark badge in the payment feed. Without a token, payments appear as anonymous `molty-agent-xxxx`.

## OpenClaw Setup

Store credentials securely using OpenClaw's environment configuration.

Add to `~/.openclaw/.env`:
```
EVM_PRIVATE_KEY=0x...
SVM_PRIVATE_KEY=...
MOLTY_IDENTITY_TOKEN=...
```

### Security Best Practices

1. **File permissions**: `chmod 600 ~/.openclaw/.env`
2. **State directory**: `chmod 700 ~/.openclaw`
3. **Run security audit**: `openclaw security audit --deep`
4. **Never commit** credentials to version control

## Links

- [molty.cash](https://molty.cash)
- [x402.org](https://x402.org)