← Back to Skills Marketplace
harleyscodes

Hedera Token Minting

by HarleysCodes · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
559
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install hedera-token-mint
Description
Create and manage fungible tokens and NFTs on Hedera with minting, supply control, and permission configuration.
README (SKILL.md)

Hedera Token Minting (HTS)

Setup

npm install @hashgraph/sdk

Create Fungible Token

import { 
  TokenCreateTransaction, 
  TokenSupplyType,
  TokenType 
} from '@hashgraph/sdk';

const tx = await new TokenCreateTransaction()
  .setTokenName("My Token")
  .setTokenSymbol("MTK")
  .setTokenType(TokenType.FungibleCommon)
  .setSupplyType(TokenSupplyType.Infinite)
  .setDecimals(2)
  .setInitialSupply(1000000) // Total supply = 1,000,000
  .setTreasuryAccountId(treasuryId)
  .setAdminKey(adminKey)
  .setSupplyKey(supplyKey)
  .freezeWith(client)
  .sign(treasuryKey);

const result = await tx.execute(client);
const tokenId = result.receipt.tokenId;

Create NFT Collection

const tx = await new TokenCreateTransaction()
  .setTokenName("My NFT Collection")
  .setTokenSymbol("MNFT")
  .setTokenType(TokenType.NonFungibleUnique)
  .setTreasuryAccountId(treasuryId)
  .setAdminKey(adminKey)
  .setSupplyKey(supplyKey)
  .freezeWith(client)
  .sign(treasuryKey);

Mint NFTs

import { TokenMintTransaction } from '@hashgraph/sdk';

const tx = await new TokenMintTransaction()
  .setTokenId(tokenId)
  .addMetadata(Buffer.from("NFT #1 metadata"))
  .addMetadata(Buffer.from("NFT #2 metadata"))
  .freezeWith(client)
  .sign(supplyKey);

const result = await tx.execute(client);

Token Operations

Transfer Token

import { TransferTransaction } from '@hashgraph/sdk';

await new TransferTransaction()
  .addTokenTransfer(tokenId, fromAccount, -10)
  .addTokenTransfer(tokenId, toAccount, 10)
  .execute(client);

Burn Tokens

import { TokenBurnTransaction } from '@hashgraph/sdk';

await new TokenBurnTransaction()
  .setTokenId(tokenId)
  .setAmount(100)
  .execute(client);

Key Points

  • Supply Types: Infinite or Finite
  • Token Types: FungibleCommon or NonFungibleUnique
  • Royalty: Use custom fees for NFT royalties
  • Token ID Format: 0.0.12345
Usage Guidance
This skill appears to be a simple recipe for using the Hedera JavaScript/TypeScript SDK to create and manage tokens, which is coherent. However, the SKILL.md omits how to initialize the Hedera client or where private keys (treasuryKey, supplyKey, adminKey) should come from. Before installing or using the skill: - Never paste real mainnet private keys into a tool or skill you don't fully trust. Prefer testnet keys for trial runs. - Ask the publisher (or update the skill) to declare explicit environment variables or a secure key-loading procedure (e.g., use a secrets manager, environment variables with clear names, or hardware keys). - Confirm whether the agent will prompt for keys or try to read them from files or environment variables. If it prompts, prefer to supply ephemeral/test keys or perform operations manually. - Audit the @hashgraph/sdk version you install and pin a known-good version; run npm audit and review release notes for security issues. - If you need higher assurance, request the skill include a secure example of client initialization (showing network selection, operator configuration, and explicit env var names) and clear instructions for safe key management. I rated this 'suspicious' (medium confidence) because the core functionality matches the description but the omission of credential handling is a notable inconsistency. Providing declared env vars or a secure key-handling workflow would increase confidence.
Capability Analysis
Type: OpenClaw Skill Name: hedera-token-mint Version: 1.0.0 The skill bundle provides documentation and code examples for interacting with the Hedera Token Service using the official `@hashgraph/sdk`. The `SKILL.md` file contains standard setup instructions (`npm install`) and illustrative TypeScript code snippets for creating, minting, transferring, and burning Hedera tokens. There is no evidence of malicious intent, such as data exfiltration, unauthorized execution, persistence mechanisms, or prompt injection attempts against the AI agent. All content aligns with the stated purpose of managing Hedera tokens.
Capability Assessment
Purpose & Capability
The skill's name and examples (using @hashgraph/sdk to create/mint/transfer/burn tokens) align with its stated purpose. Requiring the Hashgraph SDK is reasonable for Hedera token operations. However, the examples assume the presence of a Hedera client and private keys (treasuryKey, supplyKey, adminKey) without documenting how those credentials are supplied or secured.
Instruction Scope
SKILL.md gives concrete code for token operations and suggests `npm install @hashgraph/sdk`. It does not instruct the agent to read unrelated system files, but it references variables (client, treasuryId, supplyKey, treasuryKey, etc.) that imply access to sensitive credentials. There is no guidance on initializing the client, target network (testnet/mainnet), or secure key handling — leaving broad discretion about where keys come from.
Install Mechanism
This is an instruction-only skill with no install spec. The doc tells users to run `npm install @hashgraph/sdk`, which is a standard npm package install (traceable to the npm registry). That is expected for TypeScript examples but does carry the usual npm supply-chain considerations; no suspicious download URLs or archives are present in the skill itself.
Credentials
The runtime examples clearly require private keys and a configured Hedera client, but the skill declares no required environment variables, primary credential, or config paths. This mismatch is meaningful: the skill needs sensitive credentials to function but does not declare or constrain how they're provided, increasing risk of accidental key exposure or ad-hoc prompts for secrets.
Persistence & Privilege
The skill does not request persistent platform privileges (always is false), nor does it declare any config-path or cross-skill modification. It appears to rely on the agent executing user-supplied code snippets at runtime; no elevated platform presence is requested.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install hedera-token-mint
  3. After installation, invoke the skill by name or use /hedera-token-mint
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of hedera-token-mint (v1.0.0). - Enables minting of fungible tokens and creation of NFT collections on Hedera HTS. - Supports setting up token supply types, decimals, and permissions (admin/supply keys). - Includes methods for minting NFTs, transferring tokens, and burning tokens. - Documentation covers usage examples and key concepts like token types and royalties.
Metadata
Slug hedera-token-mint
Version 1.0.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Hedera Token Minting?

Create and manage fungible tokens and NFTs on Hedera with minting, supply control, and permission configuration. It is an AI Agent Skill for Claude Code / OpenClaw, with 559 downloads so far.

How do I install Hedera Token Minting?

Run "/install hedera-token-mint" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Hedera Token Minting free?

Yes, Hedera Token Minting is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Hedera Token Minting support?

Hedera Token Minting is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Hedera Token Minting?

It is built and maintained by HarleysCodes (@harleyscodes); the current version is v1.0.0.

💬 Comments