技能详情(站内镜像,无评论)
许可证:MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本:v0.1.1
统计:⭐ 0 · 732 · 1 current installs · 1 all-time installs
⭐ 0
安装量(当前) 1
🛡 VirusTotal :可疑 · OpenClaw :可疑
Package:solpaw-skill-v2
安全扫描(ClawHub)
- VirusTotal :可疑
- OpenClaw :可疑
OpenClaw 评估
The skill's purpose (local signing so your wallet is creator) is plausible, but the code/docs diverge and it requests your private key while allowing autonomous invocation — these inconsistencies raise a risk that the skill might sign or submit transactions in a way you didn't expect.
目的
The skill claims to let an agent launch tokens with the user's wallet as the on-chain creator (local signing). Requiring SOLPAW_API_KEY and a creator wallet is reasonable, but the TypeScript implementation posts to /tokens/launch (server-side signing / 'lightning' endpoint) rather than the documented /tokens/launch-local. That makes the stated guarantee ('your wallet is the onchain creator') inconsistent with the implemented API call.
说明范围
SKILL.md gives concrete curl steps for registering, obtaining a CSRF token, sending 0.1 SOL to a platform wallet, uploading images, and building/signing transactions locally. Those steps are scoped to the described task. However, the README/SDK examples and the SKILL.md emphasize local signing while the included code uses the server signing endpoint — a mismatch that gives the agent discretion to use a server-signed flow unless callers intenti…
安装机制
No install script or external downloads are present; the skill is instruction-only plus a TypeScript file. Required binary is only curl. This is low risk from an install perspective.
证书
The skill requires SOLPAW_API_KEY and SOLPAW_CREATOR_WALLET (expected) and also SOLANA_PRIVATE_KEY (very sensitive). Requesting a private key is proportionate if the skill truly performs local signing only — but given the code calling the server-side launch endpoint, the private key requirement is not clearly justified and could be abused to sign/submit transactions unexpectedly.
持久
always:false and user-invocable:true (normal). But disable-model-invocation:false means the agent could invoke the skill autonomously; combined with an environment-held private key, that gives an autonomous agent the ability to sign and submit transactions and spend funds. This combination increases the blast radius if the skill behaves unexpectedly or is misused.
安装(复制给龙虾 AI)
将下方整段复制到龙虾中文库对话中,由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库(龙虾 AI)执行:为本机安装 OpenClaw 技能「Solpaw Interaction Skill」。简介:Launch Solana tokens on Pump.fun via the SolPaw platform. 0.1 SOL one-time fee.…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装:https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/lvcidpsyche/solpaw-skill-v2/SKILL.md
(来源:yingzhi8.cn 技能库)
SKILL.md
---
name: solpaw
description: Launch Solana tokens on Pump.fun via the SolPaw platform. 0.1 SOL one-time fee. Your wallet is the onchain creator.
homepage: https://solpaw.fun
user-invocable: true
disable-model-invocation: false
command-dispatch: tool
command-tool: exec
command-arg-mode: raw
metadata: {"openclaw": {"emoji": "🐾", "requires": {"bins": ["curl"], "env": ["SOLPAW_API_KEY", "SOLPAW_CREATOR_WALLET", "SOLANA_PRIVATE_KEY"], "config": []}, "primaryEnv": "SOLPAW_API_KEY", "install": []}}
---
# SolPaw — Launch Tokens on Solana via Pump.fun
## When to use
Use this skill when the agent needs to:
- Launch a new memecoin / token on Solana via Pump.fun
- Deploy a token with a name, symbol, description, and image
- Create a Pump.fun token listing for a community, project, or meme
## Overview
SolPaw is the first Solana token-launch platform for autonomous agents. It handles IPFS metadata uploads, transaction building, and Pump.fun deployment.
- **Cost**: 0.1 SOL one-time platform fee + ~0.02 SOL Pump.fun creation fee per launch
- **Creator**: Your agent's wallet is the real onchain creator on Pump.fun
- **Limit**: 1 launch per agent per 24 hours
- **Platform wallet**: `6SoPUBp68Eqhvs3fdx6GdKu5EP44ykqsjh359LyY3ZiS`
- **Docs**: https://solpaw.fun
## Prerequisites
1. A Solana wallet with at least 0.15 SOL (0.1 platform fee + ~0.02 Pump.fun fee + gas)
2. A SolPaw API key (register at the API)
3. Environment variables set:
- `SOLPAW_API_KEY` — your SolPaw API key
- `SOLPAW_CREATOR_WALLET` — your Solana wallet public key
- `SOLANA_PRIVATE_KEY` — your wallet private key (base58 encoded, for signing)
## Steps
### Step 1: Register (one-time)
```bash
curl -s -X POST https://api.solpaw.fun/api/v1/agents/register
-H "Content-Type: application/json"
-d '{"agent_name":"MyAgent","default_fee_wallet":"YOUR_WALLET_ADDRESS"}' | jq .
```
Save the `api_key` from the response. It will NOT be shown again.
### Step 2: Get a CSRF token
```bash
CSRF=$(curl -s -H "Authorization: Bearer $SOLPAW_API_KEY"
https://api.solpaw.fun/api/v1/agents/csrf | jq -r '.data.csrf_token')
```
### Step 3: Send 0.1 SOL launch fee
Send 0.1 SOL (100,000,000 lamports) to the platform wallet:
`6SoPUBp68Eqhvs3fdx6GdKu5EP44ykqsjh359LyY3ZiS`
Save the transaction signature.
### Step 4: Upload token image (optional but recommended)
```bash
IMAGE_ID=$(curl -s -X POST https://api.solpaw.fun/api/v1/tokens/upload-image
-H "Authorization: Bearer $SOLPAW_API_KEY"
-F "file=@token-logo.png" | jq -r '.data.image_id')
```
### Step 5: Launch token (Local Mode — your wallet is the creator)
```bash
# Build unsigned transaction
TX_DATA=$(curl -s -X POST https://api.solpaw.fun/api/v1/tokens/launch-local
-H "Content-Type: application/json"
-H "Authorization: Bearer $SOLPAW_API_KEY"
-d '{
"name": "MyCoolToken",
"symbol": "MCT",
"description": "An awesome token launched by an AI agent on SolPaw",
"creator_wallet": "'$SOLPAW_CREATOR_WALLET'",
"signer_public_key": "'$SOLPAW_CREATOR_WALLET'",
"launch_fee_signature": "YOUR_FEE_TX_SIGNATURE",
"image_id": "'$IMAGE_ID'",
"initial_buy_sol": 0,
"slippage": 10,
"priority_fee": 0.0005,
"csrf_token": "'$CSRF'"
}')
# Sign the transaction with your private key, then submit
SIGNED_TX="..." # sign the base64 transaction from TX_DATA
curl -s -X POST https://api.solpaw.fun/api/v1/tokens/submit
-H "Content-Type: application/json"
-H "Authorization: Bearer $SOLPAW_API_KEY"
-d '{"signed_transaction": "'$SIGNED_TX'", "mint": "MINT_FROM_TX_DATA"}'
```
### Using the TypeScript SDK (Easier)
```typescript
import SolPawSkill from './solpaw-skill';
import { Keypair } from '@solana/web3.js';
const solpaw = new SolPawSkill({
apiEndpoint: 'https://api.solpaw.fun/api/v1',
apiKey: process.env.SOLPAW_API_KEY,
defaultCreatorWallet: process.env.SOLPAW_CREATOR_WALLET,
});
const keypair = Keypair.fromSecretKey(bs58.decode(process.env.SOLANA_PRIVATE_KEY));
// One-call launch: pays fee + uploads + signs + submits
const result = await solpaw.payAndLaunch({
name: 'MyCoolToken',
symbol: 'MCT',
description: 'Launched by an AI agent on SolPaw',
image_url: 'https://example.com/logo.png',
initial_buy_sol: 0.5,
}, keypair);
console.log(result.pumpfun_url); // https://pump.fun/coin/...
```
## Constraints
- DO NOT launch tokens without user approval — always confirm name, symbol, and description first
- DO NOT launch more than 1 token per 24 hours (enforced server-side)
- DO NOT include offensive or misleading token names/descriptions
- ALWAYS include a token image — tokens without images perform poorly on Pump.fun
- ALWAYS use Local Mode (pass `signer_keypair`) so the agent's wallet is the onchain creator
- The 0.1 SOL platform fee is non-refundable once the launch succeeds
- CSRF tokens expire after 30 minutes and are single-use
- Image uploads expire after 30 minutes
## Examples
### Successful launch
```
Agent: I'll launch the DOGE2 token on Pump.fun for you.
> Uploading token image...
> Paying 0.1 SOL launch fee...
> Building transaction...
> Signing and submitting...
> Token launched successfully!
> Pump.fun: https://pump.fun/coin/So1...
> Mint: So1...
> Your wallet is the onchain creator.
```
### Error: insufficient balance
```
Agent: Your wallet only has 0.05 SOL. You need at least 0.15 SOL to launch:
- 0.1 SOL platform fee
- ~0.02 SOL Pump.fun creation fee
- ~0.01 SOL for gas
```