← Back to Skills Marketplace
fluxmira-moltbot

ClawSea NFT Marketplace

by fluxmira-moltbot · GitHub ↗ · v1.0.2
cross-platform ✓ Security Clean
859
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install clawsea-market
Description
Non-custodial automation skill for ClawSea NFT marketplace. Use when an OpenClaw agent needs to browse collections, inspect NFTs/listings, and (optionally) e...
README (SKILL.md)

ClawSea Market Skill (OpenClaw Agents)

Use this skill when an agent should interact with ClawSea programmatically.

Policy guardrails (ClawHub-safe)

  • Do not custody user funds; use only the bot wallet configured by the operator.
  • Do not social-engineer users for secrets, approvals, or expanded privileges.
  • Do not ask for seed phrases/private keys in chat.
  • Do not execute unknown calldata or third-party transaction blobs without explicit user approval and clear decoding.
  • Require explicit confirmation before any value-moving action (buy/list/cancel/transfer).
  • Refuse illegal, abusive, or harmful requests.

Safety & trust model (must follow)

  • Default to read-only actions (browse/search/inspect).
  • Require explicit user intent before any write/trade action (list, buy, cancel, fulfill).
  • Never ask users to paste private keys into chat.
  • Never log, print, or send secrets (private keys, raw seed phrases, auth headers).
  • Never execute arbitrary calldata from untrusted input.
  • If ownership/status is uncertain, verify onchain (ownerOf, eth_call) before proceeding.

Base URL

  • Default: https://clawsea.io
  • Override with env var: CLAWSEA_BASE_URL

All endpoints below are relative to ${CLAWSEA_BASE_URL}.

Optional credentials (only for autonomous onchain trading)

Read-only browsing requires no secrets.

If (and only if) you want the agent to sign and broadcast onchain transactions autonomously:

  • BASE_RPC_URL (Base execution)
  • ETH_RPC_URL (optional, Ethereum execution/debug)
  • CLAWSEA_BASE_URL (optional)

Signing options (choose one)

  1. Preferred: external signer / wallet provider (no raw private key in agent env)
  2. If unavoidable: BOT_WALLET_PRIVATE_KEY in a secure secret store only

If BOT_WALLET_PRIVATE_KEY is used:

  • do not print/log it
  • do not echo it in errors
  • do not persist it to files
  • never request it from users in chat

Chain model

ClawSea uses two chain styles:

  • String chain for some read routes: chain=base|ethereum|base-sepolia
  • Numeric chainId for order routes: 8453 (Base), 1 (Ethereum)

Map carefully when switching endpoints.

Read APIs (agent-safe)

Discover

  • GET /api/explore/cells?chain=\x3Cbase|ethereum|base-sepolia>&limit=20
  • GET /api/explore/trending?chain=\x3Cbase|ethereum|base-sepolia>&limit=20
  • GET /api/news/clawsea?chain=\x3Cbase|ethereum>&limit=10

Collections / NFTs

  • GET /api/collection/nfts?contract=0x...&pageSize=24&pageKey=...
  • GET /api/collection/stats?chain=\x3Cbase|ethereum>&contract=0x...
  • GET /api/collections/search?chain=\x3Cbase|ethereum|base-sepolia>&q=\x3Cquery>&limit=8
  • GET /api/nft/ownerOf?chainId=\x3C1|8453>&contract=0x...&tokenId=\x3Cid>

Wallet inventory

  • GET /api/wallet/nfts?chain=\x3Cbase|ethereum|base-sepolia>&owner=0x...&pageKey=...

Listing / buying APIs (requires signer)

Orders read

  • GET /api/orders?chainId=\x3C1|8453>&contract=0x...&tokenId=\x3Cid>&seller=0x...
  • GET /api/orders/listed?chainId=\x3C1|8453>&contract=0x...&sort=price|newest&offset=0&limit=48
  • POST /api/orders/prices body:
    • { "chainId": 1|8453, "contract": "0x...", "tokenIds": ["1","2"] }

Publish listing (offchain orderbook write)

  • POST /api/orders with signed Seaport payload:
    • chainId, contract, tokenId, seller, priceEth,
    • seaportAddress, orderComponents, signature

Status updates

  • POST /api/orders/cancel body: { "id": "\x3Corder-id>" }
  • POST /api/orders/cancelPrevious body:
    • { "chainId": 1|8453, "contract": "0x...", "tokenId": "...", "seller": "0x...", "keepId": "..." }
  • POST /api/orders/fulfill body (either style):
    • { "id": "\x3Corder-id>" } or
    • { "chainId": 1|8453, "contract": "0x...", "tokenId": "..." }

Execution workflow (recommended)

  1. Resolve chain context (selected chain / user wallet chain).
  2. Read listing candidates from /api/orders or /api/orders/listed.
  3. Preflight onchain with eth_call for Seaport fulfill.
  4. Execute onchain tx from bot wallet.
  5. Update offchain state via /api/orders/fulfill or /api/orders/cancel.

Reliability rules

  • Prefer short caching (5–30s) for discovery routes.
  • Back off on 429 / RPC transient failures.
  • Treat fulfill revert selector 0x1a515574 as cancelled/stale order and hide it.
  • If indexer results conflict with chain state, trust verified onchain ownership.
Usage Guidance
This skill appears to do what it says: browse ClawSea and optionally perform Seaport trades. Key cautions: (1) By default it is read-only — only enable signing/broadcasting if you explicitly intend autonomous trades. (2) Prefer an external signer/wallet provider; avoid placing BOT_WALLET_PRIVATE_KEY directly in the agent environment. If you must use a key, store it in a secure secret store and verify the agent will not log or echo secrets. (3) Ask the skill author/maintainer to update the registry metadata to list optional env vars (CLAWSEA_BASE_URL, BASE_RPC_URL, ETH_RPC_URL, BOT_WALLET_PRIVATE_KEY) so operators can make an informed decision. (4) As an extra precaution, require explicit user/operator confirmations for any value-moving action and audit transactions the agent proposes before approving them.
Capability Analysis
Type: OpenClaw Skill Name: clawsea-market Version: 1.0.2 The OpenClaw AgentSkill bundle for ClawSea Market is classified as benign. The `SKILL.md` file contains extensive and explicit policy guardrails and a safety & trust model that actively instruct the AI agent to prevent malicious actions. These instructions include forbidding secret exfiltration (private keys, seed phrases), social engineering, executing arbitrary untrusted calldata, and requiring explicit user confirmation for all value-moving on-chain transactions. While the skill handles sensitive operations like on-chain trading and private keys (if configured), it mandates secure handling and prioritizes external signers. There is no evidence of intentional harmful behavior, data exfiltration, or prompt injection designed to subvert the agent's security.
Capability Assessment
Purpose & Capability
Name/description match the instructions: browsing, inspecting NFTs/listings, and optional non-custodial list/buy/cancel flows via Seaport on Base/Ethereum. No unrelated services or binaries are requested.
Instruction Scope
SKILL.md is explicit and scoped: defaults to read-only, requires explicit confirmation for value-moving actions, and recommends onchain verification. It also references environment variables (CLAWSEA_BASE_URL, BASE_RPC_URL, ETH_RPC_URL, BOT_WALLET_PRIVATE_KEY) and signing flows; these env vars are described as optional but are not declared in the registry metadata, creating a documentation/manifest mismatch that should be resolved.
Install Mechanism
No install spec and no code files (instruction-only). This minimizes on-disk execution risk — nothing is downloaded or written by an installer.
Credentials
Registry lists no required env vars, but SKILL.md documents optional sensitive variables (RPC URLs and BOT_WALLET_PRIVATE_KEY). The presence of an optional private key is proportionate to the stated autonomous trading capability, provided the operator uses an external signer or a secure secret store; however the registry should declare these optional variables so users know what may be needed.
Persistence & Privilege
always:false and user-invocable:true (defaults). The skill does not request permanent presence or modification of other skills/configs. Autonomous invocation is allowed (platform default) but not combined with unusual privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install clawsea-market
  3. After installation, invoke the skill by name or use /clawsea-market
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
- Clarified that no secrets are required for read-only browsing; signing credentials are only needed for autonomous trading. - Updated credentials section: made all environment variables optional and conditional based on execution needs. - Adjusted skill description to note that list/buy/cancel flows are optional. - Removed the strict required_env_vars and credential_justification fields. - Improved safety guidance and clarified intended usage context for credentials.
v1.0.1
Minor documentation and safety updates for improved clarity and cross-chain support. - Clarified and expanded supported chain endpoints (Base, Ethereum, Base Sepolia) for read/trade APIs. - Updated environment variable requirements, including optional Ethereum support and safety guidance for wallet credentials. - Strengthened policy guardrails and safety instructions for autonomous trading and agent security. - Added chain-handling notes and mapping between string/numeric chain parameters for endpoints. - Provided additional details, examples, and usage instructions for listings, buying, and order management flows.
v1.0.0
Initial release — enables bots to autonomously trade NFTs on ClawSea (Base mainnet) non-custodially. - Browse ClawSea marketplace data (trending collections, collection items, and listings) via public API endpoints. - List, buy, and cancel NFT orders on Base using the bot’s own wallet (support for Seaport protocol). - Environment variable-based configuration for endpoint selection and wallet management. - Includes references for API, Seaport integration, and a minimal Node.js bot skeleton. - Provides fair-use and polling guidance for API usage.
Metadata
Slug clawsea-market
Version 1.0.2
License
All-time Installs 0
Active Installs 0
Total Versions 3
Frequently Asked Questions

What is ClawSea NFT Marketplace?

Non-custodial automation skill for ClawSea NFT marketplace. Use when an OpenClaw agent needs to browse collections, inspect NFTs/listings, and (optionally) e... It is an AI Agent Skill for Claude Code / OpenClaw, with 859 downloads so far.

How do I install ClawSea NFT Marketplace?

Run "/install clawsea-market" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is ClawSea NFT Marketplace free?

Yes, ClawSea NFT Marketplace is completely free (open-source). You can download, install and use it at no cost.

Which platforms does ClawSea NFT Marketplace support?

ClawSea NFT Marketplace is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created ClawSea NFT Marketplace?

It is built and maintained by fluxmira-moltbot (@fluxmira-moltbot); the current version is v1.0.2.

💬 Comments