XRPL Token Minting

ReviewAudited by ClawScan on May 10, 2026.

Overview

This is an instruction-only XRPL token/NFT template skill; its blockchain actions are high-impact if executed, but they are disclosed and aligned with the stated purpose.

This skill appears coherent for XRPL token and NFT transaction construction. Before installing or using it, remember that XRPL transactions can be irreversible once signed and submitted, so verify all transaction fields and use a trusted wallet/signing workflow.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Medium

#ASI02: Tool Misuse and Exploitation

What this means

If used incorrectly, these templates could result in unintended token issuance, payments, NFT minting, or marketplace offers on XRPL.

Why it was flagged

The skill documents XRPL transaction objects that could move or create assets if a user or agent later signs and submits them.

Skill content

TransactionType: 'Payment' ... Account: 'rIssuerAddress' ... Destination: 'rUserAddress' ... value: '1000'

Recommendation

Treat every transaction as a high-impact blockchain action; verify account addresses, amounts, flags, fees, and network before signing or submitting.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing an unpinned package may pull the latest available version, which can change over time.

Why it was flagged

The setup step asks the user to install the XRPL npm package without a pinned version, which is normal for many examples but depends on the npm package supply chain.

Skill content

npm install xrpl

Recommendation

Install from the official npm registry and consider pinning a known-good `xrpl` version in a project lockfile.