📦 Hedera Transaction Builder — 构建并发送交易
v1.0.0一站式构建、签名并提交 Hedera 链上交易，支持 HBAR 转账、Token 操作及智能合约调用，简化与 Hedera 网络的交互流程。
0· 740·0 当前·0 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill appears to be a helper for building Hedera transactions, but it doesn't tell you how to provide signing keys safely. Before installing or using it: (1) don't paste private keys into chat or into an agent — prefer connecting a wallet (e.g., HashPack) or setting keys in a secure environment variable/file on your machine; (2) run `npm install @hashgraph/sdk` yourself in a controlled environment and review the package/version you're installing; (3) verify the network endpoints and prefer ...详细分析 ▾
⚠ 用途与能力
The skill's stated purpose (build, sign, submit Hedera transactions) aligns with the SDK usage shown, but the registry metadata declares no required credentials or config while the instructions implicitly require access to a signing key (operatorKey or a wallet like HashPack). Requiring no credentials is not coherent with a transaction-signing tool.
⚠ 指令范围
SKILL.md instructs installing @hashgraph/sdk and shows code that signs transactions with an operator key or HashPack, but it does not specify how keys are loaded (env vars, key files, wallet flow). Because it omits safe key-handling guidance, users might be prompted to paste private keys or expose credentials to the agent — the instructions are incomplete and risk-prone.
ℹ 安装机制
There is no formal install spec in the skill bundle; SKILL.md tells the user to run `npm install @hashgraph/sdk`. Installing the official npm package is expected for this purpose, but the absence of an install specification in the registry (and no pinned version or integrity guidance) reduces clarity and reproducibility.
⚠ 凭证需求
The skill declares no required environment variables or primary credential even though signing and submitting transactions requires private keys or a wallet connection. This under-declaration is disproportionate and increases the chance of insecure key handling. The listed network endpoints are external but expected for Hedera.
✓ 持久化与权限
The skill does not request always:true and does not ask to modify other skills or system-wide settings. It appears not to require persistent elevated privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/15
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install hedera-tx-builder
镜像加速npx clawhub@latest install hedera-tx-builder --registry https://cn.longxiaskill.com