# Send Safe Skills to your agent Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually. ## Fast path - Download the package from Yavira. - Extract it into a folder your agent can access. - Paste one of the prompts below and point your agent at the extracted folder. ## Suggested prompts ### New install ```text I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete. ``` ### Upgrade existing ```text I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run. ``` ## Machine-readable fields ```json { "schemaVersion": "1.0", "item": { "slug": "safe-skills", "name": "Safe Skills", "source": "tencent", "type": "skill", "category": "安全合规", "sourceUrl": "https://clawhub.ai/glitch003/safe-skills", "canonicalUrl": "https://clawhub.ai/glitch003/safe-skills", "targetPlatform": "OpenClaw" }, "install": { "downloadUrl": "/downloads/safe-skills", "sourceDownloadUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=safe-skills", "sourcePlatform": "tencent", "targetPlatform": "OpenClaw", "packageFormat": "ZIP package", "primaryDoc": "SKILL.md", "includedAssets": [ "SKILL.md" ], "downloadMode": "redirect", "sourceHealth": { "source": "tencent", "status": "healthy", "reason": "direct_download_ok", "recommendedAction": "download", "checkedAt": "2026-04-23T16:43:11.935Z", "expiresAt": "2026-04-30T16:43:11.935Z", "httpStatus": 200, "finalUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=4claw-imageboard", "contentType": "application/zip", "probeMethod": "head", "details": { "probeUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=4claw-imageboard", "contentDisposition": "attachment; filename=\"4claw-imageboard-1.0.1.zip\"", "redirectLocation": null, "bodySnippet": null }, "scope": "source", "summary": "Source download looks usable.", "detail": "Yavira can redirect you to the upstream package for this source.", "primaryActionLabel": "Download for OpenClaw", "primaryActionHref": "/downloads/safe-skills" }, "validation": { "installChecklist": [ "Use the Yavira download entry.", "Review SKILL.md after the package is downloaded.", "Confirm the extracted package contains the expected setup assets." ], "postInstallChecks": [ "Confirm the extracted package includes the expected docs or setup files.", "Validate the skill or prompts are available in your target agent workspace.", "Capture any manual follow-up steps the agent could not complete." ] } }, "links": { "detailUrl": "https://openagent3.xyz/skills/safe-skills", "downloadUrl": "https://openagent3.xyz/downloads/safe-skills", "agentUrl": "https://openagent3.xyz/skills/safe-skills/agent", "manifestUrl": "https://openagent3.xyz/skills/safe-skills/agent.json", "briefUrl": "https://openagent3.xyz/skills/safe-skills/agent.md" } } ``` ## Documentation ### SafeSkills - Secure Secret Management for AI Agents SafeSkills is a secure secret management service. It stores secrets (like wallet private keys) and executes actions using them so that you (the agent) never see the raw secret values. The first supported skill is an EVM wallet -- you can create wallets, transfer tokens, send transactions, check balances, and more. CRITICAL: Never attempt to access or request raw secret values. All operations are performed server-side through the API. ### Configuration Base API URL: Use the SAFESKILLS_API_URL environment variable if set, otherwise default to https://safeskill-production.up.railway.app Frontend URL: Use the SAFESKILLS_FRONTEND_URL environment variable if set, otherwise default to https://safeskill-production.up.railway.app All API requests require a Bearer token (the API key returned when creating a secret). Authorization: Bearer ### 1. Create a Wallet Create an EVM wallet secret. Store the returned API key for all subsequent calls. Share the claim URL with the user so they can manage policies for the wallet. curl -X POST "${SAFESKILLS_API_URL:-https://safeskill-production.up.railway.app}/api/secrets" \\ -H "Content-Type: application/json" \\ -d '{ "type": "EVM_WALLET", "memo": "My agent wallet", "chainId": 11155111 }' Response includes: apiKey -- store this securely; use it as the Bearer token for all future requests claimUrl -- share this with the user so they can view and manage policies for this wallet address -- the smart account address of the created wallet After creating, tell the user: "Here is your wallet claim URL: . You can use this to manage spending policies and monitor the wallet." ### 2. Get Secret Info Retrieve metadata about the secret associated with the current API key. curl -X GET "${SAFESKILLS_API_URL:-https://safeskill-production.up.railway.app}/api/secrets/info" \\ -H "Authorization: Bearer " ### 3. Get Wallet Address curl -X GET "${SAFESKILLS_API_URL:-https://safeskill-production.up.railway.app}/api/skills/evm-wallet/address" \\ -H "Authorization: Bearer " ### 4. Check Balances Check native token balance and optionally ERC-20 token balances by passing token contract addresses as a comma-separated query parameter. # Native balance only curl -X GET "${SAFESKILLS_API_URL:-https://safeskill-production.up.railway.app}/api/skills/evm-wallet/balance" \\ -H "Authorization: Bearer " # With ERC-20 tokens curl -X GET "${SAFESKILLS_API_URL:-https://safeskill-production.up.railway.app}/api/skills/evm-wallet/balance?tokens=0xTokenAddr1,0xTokenAddr2" \\ -H "Authorization: Bearer " ### 5. Transfer ETH or Tokens Transfer native ETH or an ERC-20 token to a recipient address. # Transfer native ETH curl -X POST "${SAFESKILLS_API_URL:-https://safeskill-production.up.railway.app}/api/skills/evm-wallet/transfer" \\ -H "Authorization: Bearer " \\ -H "Content-Type: application/json" \\ -d '{ "to": "0xRecipientAddress", "amount": "0.01" }' # Transfer ERC-20 token curl -X POST "${SAFESKILLS_API_URL:-https://safeskill-production.up.railway.app}/api/skills/evm-wallet/transfer" \\ -H "Authorization: Bearer " \\ -H "Content-Type: application/json" \\ -d '{ "to": "0xRecipientAddress", "amount": "100", "token": "0xTokenContractAddress" }' ### 6. Send Arbitrary Transaction Send a raw transaction with custom calldata. Useful for interacting with smart contracts. curl -X POST "${SAFESKILLS_API_URL:-https://safeskill-production.up.railway.app}/api/skills/evm-wallet/send-transaction" \\ -H "Authorization: Bearer " \\ -H "Content-Type: application/json" \\ -d '{ "to": "0xContractAddress", "data": "0xCalldata", "value": "0" }' ### Important Notes Never try to access raw secret values. The whole point of SafeSkills is that secrets stay server-side. Always store the API key returned from wallet creation -- it is the only way to authenticate subsequent requests. Always share the claim URL with the user after creating a wallet. The default chain ID 11155111 is Ethereum Sepolia testnet. Adjust as needed. If a transfer or transaction fails, check that the wallet has sufficient balance and that any required policies have been approved by the user via the claim URL. ## Trust - Source: tencent - Verification: Indexed source record - Publisher: glitch003 - Version: 1.0.0 ## Source health - Status: healthy - Source download looks usable. - Yavira can redirect you to the upstream package for this source. - Health scope: source - Reason: direct_download_ok - Checked at: 2026-04-23T16:43:11.935Z - Expires at: 2026-04-30T16:43:11.935Z - Recommended action: Download for OpenClaw ## Links - [Detail page](https://openagent3.xyz/skills/safe-skills) - [Send to Agent page](https://openagent3.xyz/skills/safe-skills/agent) - [JSON manifest](https://openagent3.xyz/skills/safe-skills/agent.json) - [Markdown brief](https://openagent3.xyz/skills/safe-skills/agent.md) - [Download page](https://openagent3.xyz/downloads/safe-skills)