ClawHub

Mint Artblocks Token

v1.0.0

Mint (purchase) an Art Blocks token using the artblocks-mcp tools. Use when a user wants to mint, purchase, or buy an Art Blocks NFT, or needs to understand...

⭐ 0· 104·1 current·1 all-time
by@ryley-o
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The SKILL.md describes calling artblocks-mcp functions (discover_projects, get_project_minter_config, check_allowlist_eligibility, build_purchase_transaction) which aligns with minting Art Blocks tokens. However, the skill does not declare any required binaries or installation steps for artblocks-mcp even though it explicitly says to use those tools — a minor documentation/manifest gap but not evidence of malicious intent.
✓
Instruction Scope
Instructions are narrowly focused on minting workflow: discovering projects, checking minter config/eligibility, and building purchase transactions. They do not instruct reading arbitrary files, environment variables, or sending data to unrelated endpoints. The doc warns about gifting and unsupported minters and instructs to surface warnings to the user.
✓
Install Mechanism
No install spec and no code files — lowest-risk instruction-only skill. Because it requires external tooling (artblocks-mcp) but doesn't install anything, there is no install-time risk from this skill bundle itself.
✓
Credentials
The skill requests no environment variables, credentials, or config paths. It does discuss wallet addresses and usernames as inputs (expected for a minting tool) but does not request private keys or tokens in the SKILL.md. This is proportionate to the stated purpose.
✓
Persistence & Privilege
always is false and agent invocation is normal. The skill does not request persistent presence or system-wide configuration changes.
Assessment
This skill is an instruction-only helper for using artblocks-mcp to mint NFTs and appears coherent. Before installing/using it: (1) ensure the agent environment actually has the artblocks-mcp tools available — the skill references them but does not declare or install them; (2) never provide private keys or paste your wallet seed phrase into the agent; signing should happen in your wallet UI or a secure signer, not by sharing secrets with the agent; (3) verify any prompts to sign/execute transactions come from your wallet and not from a chat message; and (4) be aware build_purchase_transaction only supports ETH fixed-price minters per the doc — for other minter types the instructions tell you to use your wallet directly. If you want fuller safety, ask the skill owner to declare required binaries (artblocks-mcp) and to document exactly which remote APIs/endpoints it will call during operation.

Like a lobster shell, security has layers — review code before you run it.

latestvk97acq7hbtjgg1y7fbchs440zs837d0q

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments