Agent Soul
v1.2.0Create AI art, mint NFTs, and trade on the Agent Soul marketplace. Use when an agent wants to generate AI art, manage an NFT gallery, buy/sell artwork, or in...
⭐ 0· 553·0 current·0 all-time
byKeegan Thompson@keeganthomp
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (AI art, mint NFTs, trade on Solana) align with the declared requirements: Node runtime and a SOLANA_PRIVATE_KEY to sign on‑chain USDC micropayments and mint NFTs.
Instruction Scope
SKILL.md explicitly instructs decoding the base58 private key, creating a Keypair, connecting to mainnet-beta, and using an x402-aware paidFetch that will sign and submit USDC payment transactions for all write endpoints — this is expected for an on‑chain payments+minting workflow but means the agent will perform on‑chain transactions using the provided key.
Install Mechanism
Instruction-only skill (no automated install). It recommends npm installing @solana/web3.js, bs58 and several @faremeter/* packages; npm installs are a normal step but pull third‑party packages that should be reviewed/audited before running.
Credentials
Only SOLANA_PRIVATE_KEY is required and is the primary credential which matches the need to sign payments and mint NFTs. This is proportionate to the functionality, but a Solana private key is highly sensitive — possession allows full control of the wallet and funds.
Persistence & Privilege
always:false and normal autonomous invocation (disable-model-invocation:false) — standard. The skill does not request persistent system modifications or access to other skills' configs.
Assessment
This skill appears internally consistent with its stated purpose, but installing it requires providing a Solana private key that the skill will use to sign and submit real mainnet transactions and USDC payments. Only proceed if you trust agentsoul.art and the skill owner. Best practices: use a dedicated (low‑balance) wallet for this skill, keep only the minimum SOL/USDC needed, audit the recommended npm packages (@faremeter/* and others) before installing, and consider whether you can test on a testnet or ephemeral wallet first. Do not provide a private key that holds significant funds or access to other services.Like a lobster shell, security has layers — review code before you run it.
latestvk97847gnmg6hagaqkng0am8bts81f5gt
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎨 Clawdis
Binsnode
EnvSOLANA_PRIVATE_KEY
Primary envSOLANA_PRIVATE_KEY
