技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 206 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：abdhilabs/suiroll
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill's code and runtime instructions require sensitive credentials and persist agent API keys to disk, but the registry metadata claims no required environment or config — the mismatch and some surprising requirements warrant caution before installing.
目的
The skill's purpose (Sui lotteries with Moltbook agent auth) legitimately requires a Sui signing key and Moltbook API integration; the included code implements that (SUI_PRIVATE_KEY, Moltbook flows, Sui SDK usage). However the registry metadata declares no required env vars or config paths while SKILL.md, README and the code clearly require SUI_PRIVATE_KEY, MOLTBOOK_API_KEY and (in practice) MOLTBOOK_APP_KEY — this metadata mismatch is an inco…
说明范围
SKILL.md and the shipped code instruct the agent/user to export a private Sui key and Moltbook API keys and then run CLI commands that will sign on-chain transactions with the provided key. The enter flow interactively prompts for and saves Moltbook API keys; code reads/writes ~/.config/suiroll/moltbook-session.json and may reference ~/.config/moltbook/credentials.json. These instructions read and persist secrets and perform network calls (Sui…
安装机制
There is no external download/install spec in the registry (the skill bundle includes source and built JS). No remote extract or URL-based installer is used. The package depends on @mysten/sui SDK and standard npm modules (expected for Sui integration). No suspicious remote install sources were observed in the provided manifest.
证书
The skill requires highly sensitive secrets (SUI_PRIVATE_KEY to sign/custody funds, MOLTBOOK_API_KEY to mint identity tokens, and MOLTBOOK_APP_KEY which the code requires for verifying identity tokens). SUI_PRIVATE_KEY and MOLTBOOK_API_KEY are directly related to the stated purpose; however the need for MOLTBOOK_APP_KEY (an application developer key) is unusual for an end-user CLI and may be over-broad or mis-specified. Additionally, the regis…
持久
The tool saves Moltbook session data (including the Moltbook API key returned from interactive login or the env var) to ~/.config/suiroll/moltbook-session.json. The skill does not request always:true or claim system-wide privilege, and it doesn't appear to alter other skills. Persisting user API keys to disk is normal for CLI convenience but increases the attack surface (local secret leakage) and should be disclosed/understood by the user.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「SUIROLL」。简介：Provably fair giveaway tool for AI agents on Sui with VRF and Moltbook auth.。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/abdhilabs/suiroll/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。