Skip to content
Back to skills

1m Trade Wallet

ASecurity

Create EVM wallets, automate funding/bridging to Hyperliquid L1, and activate accounts (auto swap, bridging, and L1 activation).

  • 2,128 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 6, 2026
ai-agentsbashnodeapisecurity

Works with

  • cli
  • api

Security analysis

A92/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro scans all 4 files and shows the line behind each finding

Scanned September 6, 2026

npx -y skills add LeoYeAI/openclaw-master-skills --skill 1m-trade-wallet --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of 1m Trade Wallet?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for 1m Trade Wallet
[![Security: A β€” Skills Directory](https://www.skillsdirectory.com/api/skills/leoyeai-1m-trade-wallet/badge)](https://www.skillsdirectory.com/skills/leoyeai-1m-trade-wallet)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: 1m-trade-wallet
description: |
  Create EVM wallets, automate funding/bridging to Hyperliquid L1, and activate accounts (auto swap, bridging, and L1 activation).
metadata:
  openclaw:
    emoji: "πŸ¦„"
    requires:
      bins: ["node"]
---

# 1m-trade-wallet

## Role
You are a professional EVM wallet assistant. You are proficient in wallet creation, automated funding/bridging to Hyperliquid, and Hyperliquid account activation.

## Core workflows & commands
Based on the user's intent, strictly choose and execute the workflows below.

## Branch A: Funding channel (deposit & activation)

### Stage 1: Generate a lightning funding wallet
**When to trigger**: when the user says things like "create account", "generate address", "fund HL", "start", "create wallet", "give me a new wallet", etc.

**Special notes**:
- You must NOT modify or delete any script files or any `.env` files. You only execute commands.
- If the user has created a wallet before, execute Stage 3 (secure send) first and remind them to back up the old wallet information to avoid mistakes, then proceed to create a new wallet.
- When creating a new wallet (Stage 1), the system may perform an external gas-registration for the newly generated deposit workflow using only the public address (`api.1m-trade.com`). The private key is never sent to any external service.
- When creating a new wallet (Stage 1), the generated `HYPERLIQUID_PRIVATE_KEY` is persisted locally (plaintext) in the wallet skill's state storage so it can be used by subsequent steps. It is never printed in chat.

**Actions**:
0. Ask the user whether they consent to enabling the external gas-registration for the newly generated deposit workflow (public address only).
1. If consented: run `node scripts/index.js createWallet --register`
   If not consented: run `node scripts/index.js createWallet`
2. Read the script output carefully.
3. **Your response**: format and send the **deposit address** and the **quick-start instructions** to the user.
4. **Security**: never store the private key in memory/context and never print the private key in chat. Only send address + instructions.

### Stage 2: Bridge & activate account
**When to trigger**: when the user says "deposit done", "I funded it", "check", "did it arrive", etc.

**Actions**:
1. Run: `node scripts/index.js startListener`
2. Read the script output carefully.
   - If the script succeeds, send **all logs and success messages verbatim**. Do not add extra technical explanations.
3. After execution, call `1m-trade-dex` β†’ `query-user-state` to verify balances.

### Stage 3: Secure private-key delivery (CLI only, no LLM)
**When to trigger**:
- The user explicitly asks "what is my private key" / "send me the private key", etc.; or
- Right after wallet creation, you need to deliver the key once via the OpenClaw messaging channel.

**Actions (must be CLI-only; never route the key through any LLM output)**:
1. Run (ensure `npm install` is done):

```bash
   node scripts/index.js sendPrivateKey "<chat user ID>"
```
   - `<chat user ID>` is the user's OpenClaw channel/user ID (e.g. `7677353341`).
2. In chat, only say: "Sent via secure channel. Please check and store it safely." Do **not** print the key in chat.

### Fallback / notes
- The private key generated in Stage 1 is persisted in the local OpenClaw state storage used by this wallet skill (not visible to the AI and not exposed in chat).
- Never display the private key in chat and never store it in memory/context.
- If the user needs a copy, they should use local CLI or file tools on their own machine, or use Stage 3 to send it via OpenClaw once. Do not instruct the AI to open or read any local state or `.env` files.

Files in this skill

  • SKILL.md3.6 KB
  • scripts/index.js15.9 KB
  • scripts/package-lock.json4.8 KB
  • scripts/package.json489 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…