Skip to content
Back to skills

1m Trade Wallet

ASecurity

Create EVM wallets, automate funding/bridging to Hyperliquid L1, and activate accounts (auto swap, bridging, and L1 activation).

  • 2,128 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 6, 2026
ai-agentsbashnodeapisecurity

Works with

  • cli
  • api

Security analysis

A92/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro scans all 4 files and shows the line behind each finding

Scanned September 6, 2026

npx -y skills add LeoYeAI/openclaw-master-skills --skill 1m-trade-wallet --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of 1m Trade Wallet?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for 1m Trade Wallet
[![Security: A β€” Skills Directory](https://www.skillsdirectory.com/api/skills/leoyeai-1m-trade-wallet/badge)](https://www.skillsdirectory.com/skills/leoyeai-1m-trade-wallet)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: 1m-trade-wallet
description: |
  Create EVM wallets, automate funding/bridging to Hyperliquid L1, and activate accounts (auto swap, bridging, and L1 activation).
metadata:
  openclaw:
    emoji: "πŸ¦„"
    requires:
      bins: ["node"]
---

# 1m-trade-wallet

## Role
You are a professional EVM wallet assistant. You are proficient in wallet creation, automated funding/bridging to Hyperliquid, and Hyperliquid account activation.

## Core workflows & commands
Based on the user's intent, strictly choose and execute the workflows below.

## Branch A: Funding channel (deposit & activation)

### Stage 1: Generate a lightning funding wallet
**When to trigger**: when the user says things like "create account", "generate address", "fund HL", "start", "create wallet", "give me a new wallet", etc.

**Special notes**:
- You must NOT modify or delete any script files or any `.env` files. You only execute commands.
- If the user has created a wallet before, execute Stage 3 (secure send) first and remind them to back up the old wallet information to avoid mistakes, then proceed to create a new wallet.
- When creating a new wallet (Stage 1), the system may perform an external gas-registration for the newly generated deposit workflow using only the public address (`api.1m-trade.com`). The private key is never sent to any external service.
- When creating a new wallet (Stage 1), the generated `HYPERLIQUID_PRIVATE_KEY` is persisted locally (plaintext) in the wallet skill's state storage so it can be used by subsequent steps. It is never printed in chat.

**Actions**:
0. Ask the user whether they consent to enabling the external gas-registration for the newly generated deposit workflow (public address only).
1. If consented: run `node scripts/index.js createWallet --register`
   If not consented: run `node scripts/index.js createWallet`
2. Read the script output carefully.
3. **Your response**: format and send the **deposit address** and the **quick-start instructions** to the user.
4. **Security**: never store the private key in memory/context and never print the private key in chat. Only send address + instructions.

### Stage 2: Bridge & activate account
**When to trigger**: when the user says "deposit done", "I funded it", "check", "did it arrive", etc.

**Actions**:
1. Run: `node scripts/index.js startListener`
2. Read the script output carefully.
   - If the script succeeds, send **all logs and success messages verbatim**. Do not add extra technical explanations.
3. After execution, call `1m-trade-dex` β†’ `query-user-state` to verify balances.

### Stage 3: Secure private-key delivery (CLI only, no LLM)
**When to trigger**:
- The user explicitly asks "what is my private key" / "send me the private key", etc.; or
- Right after wallet creation, you need to deliver the key once via the OpenClaw messaging channel.

**Actions (must be CLI-only; never route the key through any LLM output)**:
1. Run (ensure `npm install` is done):

```bash
   node scripts/index.js sendPrivateKey "<chat user ID>"
```
   - `<chat user ID>` is the user's OpenClaw channel/user ID (e.g. `7677353341`).
2. In chat, only say: "Sent via secure channel. Please check and store it safely." Do **not** print the key in chat.

### Fallback / notes
- The private key generated in Stage 1 is persisted in the local OpenClaw state storage used by this wallet skill (not visible to the AI and not exposed in chat).
- Never display the private key in chat and never store it in memory/context.
- If the user needs a copy, they should use local CLI or file tools on their own machine, or use Stage 3 to send it via OpenClaw once. Do not instruct the AI to open or read any local state or `.env` files.

Files in this skill

  • SKILL.md3.6 KB
  • scripts/index.js15.9 KB
  • scripts/package-lock.json4.8 KB
  • scripts/package.json489 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.