Skill: alphac007/aap-agent-bounty (version 1.0.10)

--- name: aap-agent-bounty description: Verification-first helper for proof checks and optional 0 ETH Base claim submission. metadata: openclaw: requires: bins: - gh - cast env: - BASE_RPC_URL --- # AAP Agent Bounty ## Purpose This skill helps users: 1. verify proof status, 2. prepare claim payload, 3. optionally submit a **0 ETH** non-custodial proof transaction. It is instruction-only and does not bundle executable runtime code. ## Requirements ### Required - Binaries: `gh`, `cast` - Env: `BASE_RPC_URL` ### Optional (fallback auth path) - `GH_TOKEN` when local `gh auth login` session is unavailable. ## Hard execution gate (deterministic) Transaction broadcast is allowed **only if** input includes: - `confirm_broadcast: true` If this flag is absent/false, expected output is: - `status: pending` - `reason: confirmation_missing` ## Scope and expected behavior - Primary mode is verification-first. - The skill checks proof status and prepares claim context. - Before any submission, present the exact transaction command. - If GitHub auth context is unavailable, expected output is: - `status: pending` - `reason: github_auth_missing` ## Eligibility policy boundary Eligibility criteria are defined by external program policy. This skill validates provided proofs against policy inputs. ## Network and target - Chain: Base mainnet - Zero-transfer wallet (reward distribution verification only): [REDACTED_SECRET] 0 ETH claim is a proof signal (no transfer value); normal network gas may apply. ## Credential and signer boundary - The skill does not request, collect, or store raw private keys, seed phrases, or mnemonics. - `gh` uses user-managed local auth context (`gh auth login`) or optional `GH_TOKEN`. - `cast` uses user-managed signer context. - The skill must not require or pass raw `--private-key` input. - If signer context is unavailable/unclear, expected output is: - `status: pending` - `reason: signer_context_missing` ## Claim payload `AAP_CLAIM:THESIS:TRUMP_100:ANSWER:yes:GITHUB:<github_username>:X:@<x_handle>` ## Completion criteria Completed only if: - `confirm_broadcast` is true, - tx hash exists, - target is the zero-transfer wallet, - transfer value is 0 ETH, - payload includes `THESIS:TRUMP_100` and `ANSWER:yes`, - output includes proof links. ## Return format ```json { "status": "approved|pending|rejected", "reason": "short_machine_reason", "wallet_address": "0x...", "tx_hash": "0x...", "proof_links": ["https://..."] } ```

path: README.md
content: # AAP Agent Bounty (Claimant Skill)

Verification-first helper for:
- proof checks,
- claim payload preparation,
- optional 0 ETH claim submission on Base.

## Requirements

### Required
- `gh`, `cast`
- `BASE_RPC_URL`

### Optional
- `GH_TOKEN` (fallback when local `gh auth login` context is unavailable)

## Deterministic confirmation gate

Broadcast is permitted only when input includes:
- `confirm_broadcast: true`

Otherwise return:
- `pending: confirmation_missing`

## Scope

- Checks proof status and prepares claim context.
- Shows exact transaction command before any submission.
- If no GitHub auth context: return `pending: github_auth_missing`.
- If signer context unavailable: return `pending: signer_context_missing`.

## Target

Zero-transfer wallet (reward distribution verification only):
[REDACTED_SECRET]

## Security baseline

- No raw private key / seed phrase / mnemonic collection.
- `gh` and `cast` rely on user-managed local credential/signer contexts.
- Skill does not require passing raw `--private-key`.
- Use least-privilege token scope when `GH_TOKEN` is used.

## Claim payload

`AAP_CLAIM:THESIS:TRUMP_100:ANSWER:yes:GITHUB:<github_username>:X:@<x_handle>`


path: package.json
content: name: aap-agent-bounty
version: 1.0.10
private: yes
description: Instruction-only skill package metadata
license: MIT

path: skill.json
content: {
  "name": "aap-agent-bounty",
  "version": "1.0.10",
  "description": "Verification-first helper for proof checks and optional 0 ETH Base claim submission.",
  "author": "AlphaC007",
  "license": "MIT",
  "tags": [
    "AAP",
    "BASE",
    "agent-bounty",
    "proof-verification",
    "claim-to-earn",
    "onchain-rewards"
  ],
  "dependencies": {
    "binaries": ["gh", "cast"],
    "env": ["BASE_RPC_URL"],
    "optionalEnv": ["GH_TOKEN"]
  },
  "security": {
    "secretHandling": "No raw private key/seed/mnemonic collection or storage",
    "credentialModel": "User-managed local auth/signer context; GH_TOKEN optional fallback",
    "broadcastGate": "confirm_broadcast must be true"
  }
}


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)