首页 › 龙虾技能列表 › Blink Wallet — 技能工具

Blink Wallet — 技能工具

v1.7.1

Bitcoin Lightning wallet for agents — balances, invoices, payments, BTC/USD swaps, QR codes, price conversion, transaction history, and L402 auto-pay client...

0· 43·0 当前·0 累计
by @pretyflaco·MIT-0
下载技能包
License
MIT-0
最后更新
2026/4/8
安全扫描
VirusTotal
无害
查看报告
OpenClaw
安全
high confidence
The skill's code, required env var, file I/O, and network endpoints are coherent with a Bitcoin Lightning wallet; nothing in the package indicates unexplained access or hidden exfiltration.
评估建议
This skill appears to do exactly what it claims: operate a Blink custodial Lightning wallet via the Blink API. Before installing: 1) Be prepared to provide BLINK_API_KEY with appropriate scopes (start read/receive only; grant Write only when you intend to send payments). 2) Note the skill will try to read your shell rc files (~/.profile, ~/.bashrc, ~/.bash_profile, ~/.zshrc) only to locate a BLINK_API_KEY export if not in the environment — remove other secrets from those files if you prefer not ...
详细分析 ▾
✓ 用途与能力
Name/description (Blink Lightning wallet) match the requested binary (node), the single required env var (BLINK_API_KEY), the optional Blink URLs, and the included scripts that implement wallet, invoice, payment, swap, L402, QR, and budget features.
ℹ 指令范围
Runtime instructions and scripts perform wallet operations and explicitly list filesystem reads/writes (scan of shell rc files to find BLINK_API_KEY, writing ~/.blink files, writing QR PNGs to /tmp). Reading rc files is narrowly scoped (regex for BLINK_API_KEY), but it does access user profile files and writes persistent token/config files under ~/.blink.
✓ 安装机制
There is no network install step or third-party package download; the repo contains self-contained Node.js scripts that use only built-in modules. No suspicious external installers or arbitrary URL downloads are present.
ℹ 凭证需求
Only BLINK_API_KEY is required (primary credential) and optional env vars relate to L402 root key, budget, and alternative endpoints — these are relevant to the skill. The code will try to auto-detect BLINK_API_KEY by scanning shell rc files (only to extract that single token). It also persists secrets/caches (L402 root key, L402 token cache) to ~/.blink, which is reasonable for auto-pay but worth user awareness.
ℹ 持久化与权限
Skill is not always-enabled; it stores persistent files under ~/.blink (budget.json, spending-log.json, l402-root-key, l402-tokens.json) and writes temporary PNGs to /tmp. These files are scoped to the user's home directory and appear necessary for budget, token caching, and L402 functionality — but they are persistent credentials/cache that the user should manage (file permissions are set where possible).
⚠ scripts/_blink_client.js:27
Environment variable access combined with network send.
⚠ scripts/_blink_client.js:60
File read combined with network send (possible exfiltration).
安全有层次，运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发，无需署名。

运行时依赖

无特殊依赖

版本

latestv1.7.12026/4/8

fix: l402-pay preimage polling (5x retry with 1s delay) + per-path token cache key. Discovered during Citrusrate L402 pilot.

● 无害

安装命令 点击复制

官方npx clawhub@latest install blink-claw
镜像加速npx clawhub@latest install blink-claw --registry https://cn.clawhub-mirror.com

技能文档

Bitcoin Lightning wallet operations via the Blink API. Enables agents to check balances, receive payments via invoices, send payments over Lightning, track transactions, monitor prices, and automatically pay for L402-gated web services.

What is Blink?

Blink is a custodial Bitcoin Lightning wallet with a GraphQL API. Key concepts:

  • API Key — authentication token (format: blink_...) with scoped permissions (Read, Receive, Write)
  • BTC Wallet — balance denominated in satoshis
  • USD Wallet — balance denominated in cents (stablecoin pegged to USD)
  • Lightning Invoice — BOLT-11 payment request string (lnbc...) used to receive payments
  • Lightning Address — human-readable address (user@domain) for sending payments without an invoice
  • LNURL — protocol for interacting with Lightning services via encoded URLs
  • L402 — HTTP payment protocol (RFC draft) that gates resources behind a Lightning invoice. Servers return HTTP 402 with a macaroon + invoice; clients pay and retry with the token.

Environment

  • Requires bash and Node.js 18+.
  • Requires BLINK_API_KEY environment variable with appropriate scopes.
  • For WebSocket subscriptions: Node 22+ (native) or Node 20+ with --experimental-websocket.
  • Zero runtime npm dependencies. Only Node.js built-in modules are used (node:util, node:fs, node:path, node:child_process).

Use this skill for concrete wallet operations, not generic Lightning theory.

Getting Started

1. Get your API key

  • Create a free account at dashboard.blink.sv.
  • Go to API Keys and create a key with the scopes you need.
  • Set it in your environment:
export BLINK_API_KEY="blink_..."

API Key Scopes:

  • Read — query balances, transaction history, price, account info
  • Receive — create invoices
  • Write — send payments (use with caution)
Tip: Start with Read + Receive only. Add Write when you need to send payments.

2. Verify it works

node {baseDir}/scripts/balance.js

If you see JSON with your wallet balances, you're ready.

3. Staging / Testnet (recommended for first-time setup)

To use the Blink staging environment (signet) instead of real money:

export BLINK_API_URL="https://api.staging.blink.sv/graphql"

Create a staging API key at dashboard.staging.blink.sv. The staging environment uses signet bitcoin (no real value) — perfect for testing payment flows safely.

If BLINK_API_URL is not set, production (https://api.blink.sv/graphql) is used by default.

API key auto-detection

Scripts automatically resolve BLINK_API_KEY using this order:

  • process.env.BLINK_API_KEY (checked first)
  • Shell rc files: ~/.profile, ~/.bashrc, ~/.bash_profile, ~/.zshrc — scanned for an export BLINK_API_KEY=... line only

No source ~/.profile prefix is needed. The rc file scan uses a targeted regex that reads only the BLINK_API_KEY export line — no other data is extracted from these files.

Optional: CLI wrapper (full GitHub repo only)

If you have cloned the full GitHub repo, you can optionally install a blink CLI command:

npm install   # install dev dependencies (eslint, prettier)
npm link      # creates global 'blink' command
blink --help  # verify
Note: npm link modifies global npm state. This is optional — all functionality is available by running scripts directly with node {baseDir}/scripts/