openclaw/gotchi-pocket
aaigotchi/gotchi-pocket/SKILL.md
Manage Aavegotchi pocket wallets (escrow) on Base with Bankr. Use when the user wants to deposit ERC20 tokens into a gotchi pocket, withdraw ERC20 tokens from a pocket, check pocket balances/ownership by gotchi ID, or issue plain-English pocket commands.
$ install --global
skillsauthnpx skillsauth add openclaw/skills gotchi-pocketInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 3, 2026, 7:56 AM11.1s1 file scanned
SKILL.md
Gotchi Pocket
Send and receive ERC20 tokens with Aavegotchi pockets on Base, using Bankr for signing/submission.
What this skill does
- Resolve gotchi owner + pocket address from gotchi ID
- Check owner and pocket token balances
- Deposit ERC20 tokens from owner wallet into pocket
- Withdraw ERC20 tokens from pocket with
transferEscrow(...) - Enforce owner-control check against active Bankr wallet (default)
- Parse plain-English commands and dispatch to scripts automatically
- Require explicit approval for natural-language withdraw intents
Scripts
./scripts/pocket-info.sh <gotchi-id> [--check-bankr]./scripts/pocket-balance.sh <gotchi-id> <token-alias-or-address>./scripts/pocket-deposit.sh <gotchi-id> <token-alias-or-address> <amount> [--raw]./scripts/pocket-withdraw.sh <gotchi-id> <token-alias-or-address> <to-address> <amount> [--raw]./scripts/pocket-command.sh [--approve-withdraw] [--dry-run] "<natural-language command>"
Natural-language command layer
Use one plain-English command and let the skill route it.
Examples:
./scripts/pocket-command.sh "send 25 GHST to gotchi 9638 pocket"
./scripts/pocket-command.sh "send 25 GHST from gotchi 9638 pocket to 0xb96b48a6b190a9d509ce9312654f34e9770f2110"
./scripts/pocket-command.sh "check pocket GHST balance for gotchi 9638"
./scripts/pocket-command.sh "show pocket info for gotchi 9638"
Preview parsing without sending tx:
./scripts/pocket-command.sh --dry-run "send 25 GHST to gotchi 9638 pocket"
Withdraw approval safety
Natural-language withdraws are blocked unless explicitly approved.
# First call returns approval_required=true and exits without sending
./scripts/pocket-command.sh "send 25 GHST from gotchi 9638 pocket to 0xb96b48a6b190a9d509ce9312654f34e9770f2110"
# Approved execution
./scripts/pocket-command.sh --approve-withdraw "send 25 GHST from gotchi 9638 pocket to 0xb96b48a6b190a9d509ce9312654f34e9770f2110"
Token input
Use either a token address or aliases:
GHSTFUDFOMOALPHAKEKUSDCWETHDAI
Standard workflow
- Resolve addresses:
./scripts/pocket-info.sh 9638 --check-bankr
- Check balance before mutation:
./scripts/pocket-balance.sh 9638 GHST
- Deposit or withdraw:
# Deposit 100 GHST to pocket
./scripts/pocket-deposit.sh 9638 GHST 100
# Withdraw 100 GHST from pocket to owner
./scripts/pocket-withdraw.sh 9638 GHST 0xb96b48a6b190a9d509ce9312654f34e9770f2110 100
- Re-check balance after tx:
./scripts/pocket-balance.sh 9638 GHST
Notes
- Amounts are token units by default (for example
100GHST). - Use
--rawonly when the amount is already base units. - Owner check is on by default and can be skipped with
SKIP_BANKR_OWNER_CHECK=1. - All txs use
waitForConfirmation=trueand return a BaseScan URL.
Contracts
- Aavegotchi Diamond (Base):
0xA99c4B08201F2913Db8D28e71d020c4298F29dBF - GHST (Base):
0xcD2F22236DD9Dfe2356D7C543161D4d260FD9BcB
Related Skills
openclaw/mcdonalds-skill
tools
VerifiedTrustedCommunity
Use when the user wants to connect to, test, or use the McDonalds service at mcp.mcd.cn, including checking authentication, probing MCP endpoints, listing tools, or calling McDonalds MCP tools through a reusable local CLI.
3,962SKILL.mdUpdated Apr 10, 2026
openclaw/scrapebadger
development
VerifiedTrustedCommunity
Web scraping platform — Twitter/X data, Vinted marketplace, and general web scraping API
3,962SKILL.mdUpdated Apr 10, 2026
openclaw/slowmist-security-cc
development
VerifiedTrustedCommunity
SlowMist AI Agent Security Review — comprehensive security framework for skills, repositories, URLs, on-chain addresses, and products (Claude Code version)
3,962SKILL.mdUpdated Apr 10, 2026
openclaw/humanizer-cn
data-ai
VerifiedTrustedCommunity
去除中文文本中的 AI 写作痕迹，使其读起来自然。基于维基百科 AI 写作特征指南，检测 24 种 AI 模式。触发词：humanizer-cn、去除 AI 痕迹、去除 AI 写作痕迹、中文文本人性化。
3,962SKILL.mdUpdated Apr 10, 2026