# Authenticate AltLLM Wallet Sessions

Wallet login can expose private keys or create confusing local sessions. This skill guides safer AltLLM Portal authentication, external signing, status checks, and logout.

## Install

```bash
npx skillstore add internet-court/altllm-portal-auth
```

## Metadata

- Status: approved
- Slug: internet-court-altllm-portal-auth
- Skillstore revision: r1
- Version status: missing
- Tree hash: 4f7ccc7261debbb18e6d6731404dc2a6b1d1cb5ee4f161595a16c10df2518f13
- Author: internet-court
- GitHub username: internet-court
- License: MIT
- Repository: https://github.com/internet-court/internet-court-skill/tree/main/vendored/altlayer/altllm-portal-auth
- Ref: 3f6e026a3363e0954ede7bef0cfe88d4475de137
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: confirmation\_required
- Manual install advisory: allowed
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: network, filesystem, env\_access, external\_commands
- Quality score: 38
- Quality tier: warning
- Public page: https://skillstore.pages.dev/skills/internet-court-altllm-portal-auth
- Manifest: https://skillstore.pages.dev/api/skills/internet-court-altllm-portal-auth/manifest

## Capabilities

- Guides wallet login for the local altllm CLI.
- Prepares sign-in challenges for external wallet signing.
- Verifies a nonce and signature to save a Portal session.
- Checks saved Portal session status without exposing the token.
- Logs out by removing the local Portal session file.
- Explains EVM-only signature support and non-default host guidance.

## Use Cases

- Connect a Developer Wallet: Prepare and complete an AltLLM Portal wallet login without placing private keys in command arguments.
- Troubleshoot Local Session State: Check the saved user, target origin, and forwarding status before running live CLI commands.
- Use External Signing: Fetch a challenge for a wallet provider such as Privy, then verify the returned signature.

## Prompt Templates

### Check My Session

```
Use altllm-portal-auth to check whether my saved Portal wallet session is valid before I run live commands.
```

### Prepare Wallet Challenge

```
Use altllm-portal-auth to prepare a login challenge for my wallet address. Stop after returning the challenge details for external signing.
```

### Verify Signed Challenge

```
Use altllm-portal-auth to verify my signed challenge with the nonce and signature I provide, then confirm the saved session status.
```

### Review Host Safety

```
Use altllm-portal-auth to plan wallet login for a non-default AltLLM API host. Prefer external signing and identify private-key exposure risks.
```

## Limitations

- It does not manage API keys, billing history, or payment links.
- It requires a local altllm CLI build with wallet commands.
- The backend currently supports EVM addresses and Ethereum-style signatures only.
- Local logout removes the session file but does not revoke API keys.

## Best Practices

- Prefer challenge preparation and external signing when a wallet provider is available.
- Verify wallet address, chain, nonce, challenge host, and expiration before signing.
- Check session status before live commands and protect the saved session file.

## Anti Patterns

- Passing private keys directly in command arguments.
- Auto-signing against non-default remote API hosts without reviewing the challenge.
- Assuming local logout revokes server credentials or API keys.

## Security Audit

- Audited at: 2026-07-21T02:33:25.191\+00:00
- Summary: The skill documents wallet authentication, including access to private keys and storage of a local Portal session. The primary risks are intentional credential handling, an explicitly unsafe argv option, and unreviewed shared instructions outside this package. Hardcoded URLs and Markdown command formatting are benign in context.

## Stats

- Views: 0
- Downloads: 7
- Favorites: 1
- Popularity score: 0