← Back to Skills Marketplace
harleyscodes

Hedera Transaction Builder

by HarleysCodes · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
796
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install hedera-tx-builder
Description
Build, sign, and submit Hedera transactions including HBAR transfers, token operations, and smart contract calls to the Hedera network.
README (SKILL.md)

Hedera Transaction Builder

Setup

npm install @hashgraph/sdk

Client Setup

import { Client, AccountBalanceQuery, Hbar } from '@hashgraph/sdk';

const client = Client.forMainnet();
// Or for testnet:
const client = Client.forTestnet();

Transfer HBAR

import { TransferTransaction, Hbar } from '@hashgraph/sdk';

const tx = new TransferTransaction()
  .addHbarTransfer(fromAccountId, new Hbar(-100)) // send
  .addHbarTransfer(toAccountId, new Hbar(100))    // receive
  .setTransactionMemo("Payment for goods");

// Sign with hashpack or operator
const signTx = await tx.sign(operatorKey);
const result = await signTx.execute(client);

Key Transaction Types

AccountCreate

new AccountCreateTransaction()
  .setKey(publicKey)
  .setInitialBalance(new Hbar(10))
  .setAccountMemo("My account");

TokenAssociate

new TokenAssociateTransaction()
  .setAccountId(accountId)
  .setTokenIds([tokenId1, tokenId2]);

TopicMessage

new TopicMessageTransaction()
  .setTopicId(topicId)
  .setMessage("Hello Hedera!");

Network Endpoints

  • Mainnet: https://mainnet.hashio.io/api
  • Testnet: https://testnet.hashio.io/api

Important Concepts

  • Hbar: 1 HBAR = 100,000,000 tinybars
  • Account ID: Format shard.realm.num (e.g., 0.0.12345)
  • Transaction Fee: Small HBAR fee for each transaction
  • Transaction Valid Duration: 180 seconds by default
Usage Guidance
This skill appears to be a helper for building Hedera transactions, but it doesn't tell you how to provide signing keys safely. Before installing or using it: (1) don't paste private keys into chat or into an agent — prefer connecting a wallet (e.g., HashPack) or setting keys in a secure environment variable/file on your machine; (2) run `npm install @hashgraph/sdk` yourself in a controlled environment and review the package/version you're installing; (3) verify the network endpoints and prefer official Hedera endpoints/documentation; (4) ask the skill author to declare required env vars (e.g., HEDERA_OPERATOR_ID, HEDERA_OPERATOR_KEY), provide secure key-handling instructions, and supply a homepage or source so you can audit code. If the skill is updated to explicitly declare required credentials and safe signing flows (wallet integration or clear operator setOperator guidance) and includes a source/homepage, the coherence concerns would be reduced.
Capability Analysis
Type: OpenClaw Skill Name: hedera-tx-builder Version: 1.0.0 The skill is classified as suspicious due to its inherent high-risk capabilities, specifically the instruction to execute a shell command (`npm install @hashgraph/sdk`) in `SKILL.md`. While installing dependencies is often necessary, direct shell command execution by an AI agent presents a supply chain risk and broad permissions. Additionally, the skill's core functionality involves handling cryptographic keys for signing Hedera transactions, which is a highly sensitive operation that, if mishandled or exploited, could lead to unauthorized financial transactions.
Capability Assessment
Purpose & Capability
The skill's stated purpose (build, sign, submit Hedera transactions) aligns with the SDK usage shown, but the registry metadata declares no required credentials or config while the instructions implicitly require access to a signing key (operatorKey or a wallet like HashPack). Requiring no credentials is not coherent with a transaction-signing tool.
Instruction Scope
SKILL.md instructs installing @hashgraph/sdk and shows code that signs transactions with an operator key or HashPack, but it does not specify how keys are loaded (env vars, key files, wallet flow). Because it omits safe key-handling guidance, users might be prompted to paste private keys or expose credentials to the agent — the instructions are incomplete and risk-prone.
Install Mechanism
There is no formal install spec in the skill bundle; SKILL.md tells the user to run `npm install @hashgraph/sdk`. Installing the official npm package is expected for this purpose, but the absence of an install specification in the registry (and no pinned version or integrity guidance) reduces clarity and reproducibility.
Credentials
The skill declares no required environment variables or primary credential even though signing and submitting transactions requires private keys or a wallet connection. This under-declaration is disproportionate and increases the chance of insecure key handling. The listed network endpoints are external but expected for Hedera.
Persistence & Privilege
The skill does not request always:true and does not ask to modify other skills or system-wide settings. It appears not to require persistent elevated privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install hedera-tx-builder
  3. After installation, invoke the skill by name or use /hedera-tx-builder
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of Hedera Transaction Builder. - Build and sign Hedera transactions, including HBAR transfers, token operations, and smart contract calls. - Provides code examples for creating accounts, transferring HBAR, associating tokens, and sending topic messages. - Lists important Hedera network concepts and endpoints for mainnet and testnet. - Instructional setup using @hashgraph/sdk.
Metadata
Slug hedera-tx-builder
Version 1.0.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Hedera Transaction Builder?

Build, sign, and submit Hedera transactions including HBAR transfers, token operations, and smart contract calls to the Hedera network. It is an AI Agent Skill for Claude Code / OpenClaw, with 796 downloads so far.

How do I install Hedera Transaction Builder?

Run "/install hedera-tx-builder" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Hedera Transaction Builder free?

Yes, Hedera Transaction Builder is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Hedera Transaction Builder support?

Hedera Transaction Builder is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Hedera Transaction Builder?

It is built and maintained by HarleysCodes (@harleyscodes); the current version is v1.0.0.

💬 Comments