altllm-portal-auth

Use this skill when the user asks to log in or out with a wallet session, fetch a wallet sign-in challenge, verify an externally signed challenge, o…

不碰外部（只输出文字）无严重或高危命中internet-court/internet-court-skill

它会碰到什么

扫了多少3 个文本文件，6 KB

它会碰到什么不碰外部（只输出文字）

命中总数0 处

命中统计严重 0 · 高 0 · 中 0 · 低 0

这一栏是扫描器报的事实，不是结论。命中多不等于有毒（安全工具、规则库、示例脚本本来就会包含危险写法），命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系，需要你自己看。

Wallet login and session bootstrap for the local altllm CLI, including external signers such as Privy.

> Before the first altllm command in a fresh checkout, read and follow:

> - ../_shared/preflight.md

> - ../_shared/session-and-target.md

| Command | Purpose |

|---|---|

| login-wallet --private-key-env <name> | Sign in with a locally available private key from an environment variable |

| login-wallet --private-key-file <path> | Sign in with a locally available private key from a file |

| login-wallet --private-key <hex> --allow-unsafe-private-key-argv | Sign in with an inline private key when argv exposure is explicitly accepted |

| login-wallet --prepare | Fetch a challenge for external signing |

| login-wallet --nonce <nonce> --signature <sig> | Verify an externally signed challenge and save the session |

| status | Show saved Portal session user and target URL status without exposing the token |

| logout | Remove the local saved Portal session file |

Do not assume the CLI must control the wallet private key.
If the wallet can sign the challenge message, use the prepare + verify flow.
External signers such as Privy are valid as long as they return a standard wallet signature for the challenge.
If neither a local private key nor --signature is available, return the challenge payload and stop.
Before local auto-signing, validate that the returned challenge matches the requested wallet, chain, and expected AltLLM login challenge structure.
For non-default, non-loopback API hosts, prefer --prepare and external signing instead of local auto-signing.
Current backend support is still limited to EVM addresses and Ethereum-style signatures.
Save the resulting session to ~/.altllm/portal-cli-session.json unless overridden.
Use status or its whoami alias to confirm the saved user and target URL before running live commands.
logout only removes the local session file. It does not revoke API keys.

See [references/cli-reference.md](references/cli-reference.md) for commands, payloads, and troubleshooting notes.

想直接用这个技能？

本站把开放许可（MIT / Apache 等）的技能按仓库打包整理到网盘，点一下转存到你自己的网盘，不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接，不打包。

星标★ 5,755

本站分层T1

该仓技能数95

原文件路径vendored/altlayer/altllm-portal-auth/SKILL.md