superrare-deploy

Deploy a SuperRare Sovereign ERC-721 collection on Ethereum via Bankr. Uses the official RARE factory createSovereignBatchMint path, dry-runs by default, and...

Security Scan

The skill's requirements and scripts are coherent with its stated purpose (deploying a SuperRare ERC-721 via Bankr); only minor notes about where it looks for the Bankr API key and that it writes receipts locally.

Purpose & Capability

Name, description, required binaries (cast, jq, curl) and the single required credential (BANKR_API_KEY) align with the declared purpose of building calldata and submitting a Bankr-signed transaction to the RARE factory.

Instruction Scope

Runtime instructions and scripts are narrowly focused on building calldata, optionally dry-running, submitting to Bankr, polling for receipts, parsing logs, and writing a receipt JSON. The scripts do read system state (systemctl --user) and several config files in the user's home to resolve BANKR_API_KEY and apiUrl — behavior relevant to locating the Bankr credential but broader than just reading the declared env var.

Install Mechanism

Instruction-only skill with no install spec; no external archives or installers are fetched. The only files written at runtime are receipt JSON files under the skill's receipts/ directory.

Credentials

Only BANKR_API_KEY is required (primary credential) which is appropriate. The scripts also look for the key in systemd user environment and multiple config paths (~/.openclaw/... and ~/.bankr/config.json) — functionally reasonable to find the key but the SKILL.md omitted the ~/.bankr/config.json path present in lib.sh, a minor inconsistency you should be aware of.

Persistence & Privilege

The skill is not always-enabled and does not request elevated or cross-skill configuration changes. It can be invoked autonomously (platform default) but does not attempt to persist beyond writing its own receipts.

Assessment

This skill appears to be what it says: it needs cast, jq and curl and a Bankr API key to submit a deploy transaction (dry-run by default). Before installing: (1) Confirm you trust the Bankr service and the provided API key — the script will use that key to submit transactions. (2) Note the script searches for the API key in environment, systemd user environment, and config files (including ~/.openclaw/... and ~/.bankr/config.json); if you have sensitive keys in those files, consider their location. (3) Dry-run is the default — use --broadcast or DRY_RUN=0 to actually send transactions. (4) Review config.example.json and the two scripts yourself if you want to validate endpoints (default Bankr API is https://api.bankr.bot and RPCs default to publicnode). (5) Ensure cast/jq/curl are the expected versions for your environment. The only real inconsistency found is that SKILL.md's listed Bankr key resolution steps omit ~/.bankr/config.json which lib.sh will check; that is minor but worth noting.

Deploy a SuperRare Sovereign ERC-721 collection through the official RARE factory using Bankr signing.

Scripts

• ./scripts/deploy-via-bankr.sh --name ... --symbol ... [options]
  • Builds calldata for createSovereignBatchMint(string,string) or createSovereignBatchMint(string,string,uint256).
  • Defaults to dry-run unless --broadcast is passed or DRY_RUN=0.
  • Submits through Bankr, waits for the onchain receipt, parses the deployed collection address from logs, and writes a JSON receipt.

Config

Default config path:

• config.json in this skill directory

Override with:

• SUPER_RARE_DEPLOY_CONFIG_FILE=/path/to/config.json

Expected keys:

• chain: mainnet or sepolia
• factoryAddress (optional override)
• rpcUrl (optional override)
• descriptionPrefix
• defaultMaxTokens (optional)

Defaults and safety

• Dry-run is the default. Deployment only broadcasts with --broadcast or DRY_RUN=0.
• Supported chains for RARE factory deployment are mainnet and sepolia.
• If --max-tokens is omitted, the 2-argument factory call is used.
• Successful broadcasts write receipts into receipts/.

Bankr API key resolution

1. BANKR_API_KEY
2. systemctl --user show-environment
3. ~/.openclaw/skills/bankr/config.json
4. ~/.openclaw/workspace/skills/bankr/config.json

Quick use

cp config.example.json config.json

./scripts/deploy-via-bankr.sh \
  --name "AAi Genesis" \
  --symbol "AAI"

./scripts/deploy-via-bankr.sh \
  --name "AAi Genesis" \
  --symbol "AAI" \
  --chain sepolia \
  --broadcast

Timeouts

Optional environment variables:

• BANKR_SUBMIT_TIMEOUT_SECONDS (default 60)
• RECEIPT_WAIT_TIMEOUT_SECONDS (default 300)
• RECEIPT_POLL_INTERVAL_SECONDS (default 5)