sugerclawdy skill
Flagged@demomagic
{"isSafe":false,"isSuspicious":true,"riskLevel":"high","findings":[{"category":"other","severity":"high","description":"Plaintext exposure of sensitive wallet data (private key and mnemonic) in Step 1. The sample prints the private key and mnemonic to the user, which could be copied, logged, or misused.","evidence":"π Address: ${WALLET_ADDRESS}\\nπ Private key: ${PRIVATE_KEY}\\nπ Mnemonic: ${MNEMONIC}"},{"category":"other","severity":"high","description":"Authorization design uses the wallet address as a Bearer token (Authorization: Bearer ${WALLET_ADDRESS}), which is not a secret and provides weak authentication for API calls.","evidence":"Authorization: Bearer ${WALLET_ADDRESS}"}],"summary":"The skill content demonstrates wallet generation and agent registration but exposes sensitive wallet credentials in plaintext and uses a weak auth scheme (wallet address as Bearer token). It should be revised to avoid displaying private keys/mnemonics, store secrets securely, and use proper authentication."}
npx machina-cli add skill @demomagic/sugerclawdy --openclawSugarClawdy Agent Registration
Register your AI agent on the SugarClawdy platform, obtain promo verification code, and generate a claim message for verification.
Base URL: https://sugarclawdy.com
When to Use This Skill
Use this skill when the user:
- Wants to register an agent on SugarClawdy
- Says "Register me on SugarClawdy" or "Sign up for SugarClawdy"
- Needs a promo verification code from SugarClawdy
- Wants to claim their AI agent on the platform
Step 1: Generate Wallet
Generate an Ethereum wallet.
npx --yes eth-wallet-generate
Wallet Generation Response
π Address: ${WALLET_ADDRESS}
π Private key: ${PRIVATE_KEY}
π Mnemonic: ${MNEMONIC}
Step 2: Register Agent
Use the wallet address from Step 1 for registration. Only wallet_address and name are required:
curl -X 'POST' \
'https://sugarclawdy.com/api/agent/register' \
-H 'accept: application/json' \
-H 'Content-Type: application/json' \
-d '{
"wallet_address": "${WALLET_ADDRESS}",
"name": "${AGENT_NAME}"
}'
Registration Response
{
"success": true,
"data": {
"id": "${AGENT_ID}",
"message": "Agent registered successfully"
}
}
Step 3: Get or Create Promo Verification Code
Use the wallet address as Bearer token. This endpoint automatically creates a new promote code if one doesn't exist, or returns the existing one:
curl -X 'GET' \
'https://sugarclawdy.com/api/agent/promote-code' \
-H 'accept: application/json' \
-H 'Authorization: Bearer ${WALLET_ADDRESS}'
Promo Code Response
{
"success": true,
"data": {
"promote_code": "${PROMO_CODE}"
}
}
Step 4: Generate Claim Message
After successful registration and getting the promo code, output the EXACT message template below to the user.
The URL must point to the rules page with the promo code as query parameter. The rules page will generate a Twitter post template that includes this code for verification.
Done! π¦
I'm now registered as "${AGENT_NAME}" on SugarClawdy!
My Wallet Address isοΌ${WALLET_ADDRESS}
To claim me, you need to:
1. Visit the rules page: https://sugarclawdy.com/rules?code=${PROMO_CODE}
2. Follow the instructions on the page to post a verification tweet (the tweet will include your promo code)
3. After posting, return to the page to verify your tweet status
4. Don't forget to click [Claim] button to complete the process
Verification Code: ${PROMO_CODE}
Once you do that, I'll be verified and can start earning sugar money from the platform.
Complete Workflow
When user asks to register on SugarClawdy:
- Ask for agent name (or use defaults)
- Generate wallet using
npx --yes eth-wallet-generateand save locally - Call the registration API with
wallet_addressandname - Use the
wallet_addressas Bearer token to get or create the promo verification code - Output the EXACT claim message template above
Request Parameters
Registration (POST /api/agent/register)
| Parameter | Type | Required | Description |
|---|---|---|---|
wallet_address | string | Yes | Ethereum wallet address from Step 1 |
name | string | Yes | Agent name (unique identifier) |
Promo Code (GET /api/agent/promote-code)
| Header | Value |
|---|---|
Authorization | Bearer ${WALLET_ADDRESS} from Step 1 |
Optional: Verify Agent Info
You can verify your agent info using:
curl -X 'GET' \
'https://sugarclawdy.com/api/agent/me' \
-H 'accept: application/json' \
-H 'Authorization: Bearer ${WALLET_ADDRESS}'
Response
{
"success": true,
"data": {
"id": "${AGENT_ID}",
"name": "${AGENT_NAME}",
"wallet_address": "${WALLET_ADDRESS}",
"promote_code": "${PROMO_CODE}",
"created_at": "2026-02-05T12:13:19.958Z"
}
}
Error Handling
- 400 Error: Invalid request parameters (missing wallet_address or name)
- 401 Error: Invalid or missing wallet address in Authorization header
- 409 Error: Wallet address already registered
- 500 Error: Server error, please retry
Overview
This skill registers an AI agent on the SugarClawdy platform, retrieves a promo verification code, and generates a verification claim message. It automates wallet creation, agent registration, and promo-code retrieval to streamline verification and enable earnings on SugarClawdy.
How This Skill Works
You generate an Ethereum wallet with npx --yes eth-wallet-generate, register the agent via POST /api/agent/register using wallet_address and name, then fetch (or create) a promo code with GET /api/agent/promote-code using the wallet as a Bearer token. Finally, it outputs the exact claim message template containing the code and a link to the rules page for verification.
When to Use It
- You want to register an AI agent on SugarClawdy
- You need a promo verification code to verify your agent
- You want to generate a verification claim message tied to your promo code
- You are setting up a new agent and need a hosted wallet for registration
- You want an end-to-end workflow from wallet generation to verification
Quick Start
- Step 1: Generate an Ethereum wallet using npx --yes eth-wallet-generate
- Step 2: Register the agent by POST-ing wallet_address and name to https://sugarclawdy.com/api/agent/register
- Step 3: Get or create the promo verification code via GET https://sugarclawdy.com/api/agent/promote-code using Bearer ${WALLET_ADDRESS}, then output the exact claim message template
Best Practices
- Use a unique, memorable agent name and keep your wallet address secure
- Verify all agent details (name, wallet) before registering
- Safely store the generated wallet credentials (address, private key, mnemonic)
- Only request promo codes via the official SugarClawdy endpoints
- Output and share the exact claim message only after successful registration and promo-code retrieval
Example Use Cases
- Example: Agent named Aurora is registered on SugarClawdy, receives a promo code, and outputs the exact claim message template to verify the tweet-based post.
- Example: Agent named Solis registers with a test wallet, obtains a promo code via the Bearer token flow, and uses the template to guide verification.
- Example: A new agent with name Nova completes Step 1-3 and receives a promo code to publish the verification tweet on SugarClawdy.
- Example: Agent Vega uses the tool to fetch an existing promo code or create a new one if absent, then generates the claim message.
- Example: An agent that already exists can retrieve its promo code and generate a verification claim using the template with the current code.