← Back to Skills Marketplace
1568
Downloads
1
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install bnb-nft
Description
NFT operations on BNB Chain — get NFT metadata, check ownership, list NFTs by owner, transfer ERC-721 tokens, get collection info. Use for any NFT-related tasks on BSC.
README (SKILL.md)
BNB Chain NFT Skill
ERC-721 NFT operations on BNB Chain (BSC).
Setup
Requires Node.js and ethers.js:
cd ~/.openclaw/workspace/skills/bnb-nft && npm install ethers --silent
Configuration
For write operations (transfer, approve), set private key:
export BNB_PRIVATE_KEY="0x..."
Or pass with --key flag.
Usage
All operations use: nft.js
Get Collection Info
node nft.js collection \x3Ccontract_address>
Returns name, symbol, total supply (if available).
Get NFT Metadata
node nft.js metadata \x3Ccontract_address> \x3Ctoken_id>
Returns owner, tokenURI, and fetched metadata (if URI is HTTP).
Check NFT Owner
node nft.js owner \x3Ccontract_address> \x3Ctoken_id>
List NFTs Owned by Address
node nft.js owned \x3Ccontract_address> \x3Cwallet_address> [--limit 100]
Scans token IDs to find NFTs owned by wallet. Use --limit to cap the scan range.
Get Wallet's NFT Balance
node nft.js balance \x3Ccontract_address> \x3Cwallet_address>
Returns count of NFTs owned in collection.
Transfer NFT
node nft.js transfer \x3Ccontract_address> \x3Cto_address> \x3Ctoken_id> [--key \x3Cprivate_key>]
Approve NFT for Transfer
node nft.js approve \x3Ccontract_address> \x3Cspender_address> \x3Ctoken_id> [--key \x3Cprivate_key>]
Set Approval for All
node nft.js approve-all \x3Ccontract_address> \x3Coperator_address> \x3Ctrue|false> [--key \x3Cprivate_key>]
Check if Approved
node nft.js is-approved \x3Ccontract_address> \x3Ctoken_id> \x3Cspender_address>
Popular NFT Collections (BSC Mainnet)
| Collection | Address |
|---|---|
| Pancake Squad | 0x0a8901b0E25DEb55A87524f0cC164E9644020EBA |
| Pancake Bunnies | 0xDf7952B35f24aCF7fC0487D01c8d5690a60DBa07 |
| BakerySwap | 0x5d0915E32b1fb1144f27B87C9f65AC3f661C9e6D |
Security Notes
- Never commit private keys to git
- Always verify contract addresses before interacting
- Use testnet for testing transfers first
- Check approval status before marketplace listings
Usage Guidance
This skill appears to do what it claims—interact with ERC‑721 contracts on BNB Chain—but take these precautions before installing or running it:
- The registry metadata omits runtime requirements: you need Node.js/npm to run nft.js and the SKILL.md asks you to run npm install. Don't run npm install in a sensitive environment without review.
- The SKILL.md mentions BNB_PRIVATE_KEY for write actions; the manifest didn't declare this env var. Only provide a private key if you trust the code and understand the risk. Prefer using a testnet key or an ephemeral wallet for testing.
- The script fetches tokenURI URLs (arbitrary HTTP(S) endpoints). Metadata fetches will contact third-party servers and the responses are printed to stdout — avoid sending logs/outputs to untrusted endpoints if you care about privacy.
- Verify BNB_RPC_URL (default is public Binance RPC). Consider using a trusted RPC provider or your own node to avoid MITM or rate-limiting issues.
- Review nft.js yourself (or have someone else review) before giving it access to any real private key. If you only need read-only info, avoid supplying a private key or run the read commands only.
If you want higher assurance, ask the skill author to declare required env vars (BNB_PRIVATE_KEY optional, BNB_RPC_URL optional) and required binaries (node/npm) in the registry metadata and to provide reproducible release/source provenance.
Capability Analysis
Type: OpenClaw Skill
Name: bnb-nft
Version: 0.1.0
The skill bundle is classified as benign. The `SKILL.md` and `nft.js` files describe and implement standard ERC-721 NFT operations on the BNB Chain using the `ethers.js` library. While the skill requires access to a private key for write operations (transfer, approve), this is explicitly stated and necessary for its intended functionality, with instructions to provide it via an environment variable (`BNB_PRIVATE_KEY`) or CLI flag. There is no evidence of data exfiltration beyond the necessary blockchain interactions, malicious execution, persistence mechanisms, or prompt injection attempts against the OpenClaw agent. The `getMetadata` function fetches external `tokenURI` data, which is standard for NFTs, and the script only parses JSON without executing arbitrary code.
Capability Assessment
Purpose & Capability
Name/description align with the included code: nft.js implements ERC-721 read/write operations on BNB Chain. The package.json and package-lock.json list ethers as the only dependency, which is appropriate for the stated purpose.
Instruction Scope
SKILL.md accurately documents commands and notes the need for a private key for write operations. However the skill's manifest declared no required env vars/binaries while the runtime instructions expect Node.js/npm and optionally BNB_PRIVATE_KEY and BNB_RPC_URL. SKILL.md also instructs running npm install ethers (network access) and fetching tokenURI HTTP URLs when present (fetches arbitrary metadata endpoints).
Install Mechanism
There is no automated install spec in the registry; installation is instruction-only (npm install). This pulls packages from the public npm registry (ethers and its dependencies) which is common for Node skills but is a moderate-risk action compared with instruction-only skills that require no package downloads.
Credentials
The only sensitive secret referenced is BNB_PRIVATE_KEY (used only for transfer/approve/setApprovalForAll operations) and an optional BNB_RPC_URL. These are proportionate to on-chain write operations. The manifest did not declare BNB_PRIVATE_KEY as a required env var, so the discrepancy should be noted before use.
Persistence & Privilege
The skill is not marked always:true and does not request persistent system-wide privileges. It is instruction-only and runs as a CLI script (no automatic background installation or modification of other skills).
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install bnb-nft - After installation, invoke the skill by name or use
/bnb-nft - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release: ERC-721 operations on BNB Chain (BSC)
Metadata
Frequently Asked Questions
What is BNB Chain NFT?
NFT operations on BNB Chain — get NFT metadata, check ownership, list NFTs by owner, transfer ERC-721 tokens, get collection info. Use for any NFT-related tasks on BSC. It is an AI Agent Skill for Claude Code / OpenClaw, with 1568 downloads so far.
How do I install BNB Chain NFT?
Run "/install bnb-nft" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is BNB Chain NFT free?
Yes, BNB Chain NFT is completely free (open-source). You can download, install and use it at no cost.
Which platforms does BNB Chain NFT support?
BNB Chain NFT is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created BNB Chain NFT?
It is built and maintained by CLAWZAI (@clawzai); the current version is v0.1.0.
More Skills