← Back to Skills Marketplace

Ape.Store Token Create

Name: Ape.Store Token Create
Author: mrben1

by mrben1 · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

Downloads

Stars

Active Installs

Versions

Install in OpenClaw

/install ape-store

Description

Deploys a real token on Ape.Store within the BASE blockchain using user-provided name, symbol, description, and optional image.

README (SKILL.md)

---\r \r name: apestore-token-creator\r \r description: Deploys a real token on Ape.Store on the BASE blockchain. Use when user wants to create or deploy a token on ape.store.\r \r ---\r \r \r \r # Ape.Store Token Creator\r \r \r \r When the user asks to create a token on Ape.Store, use the bash tool to run this exact command:\r \r \r \r bash command:"node \"C:\Users\ben\.openclaw\workspace\skills\ape-store\index.js\" create a token on ape.store with the name NAME and the symbol SYMBOL and the description DESCRIPTION"\r \r \r \r Replace NAME, SYMBOL, DESCRIPTION with the user's actual inputs. If an image path is provided append: and image IMAGE_PATH\r \r \r \r ## RULES\r \r - ALWAYS run the bash command above using the bash tool\r \r - NEVER mock, simulate or generate fake output\r \r - NEVER create metadata.json or copy image files yourself\r \r - Wait for real output containing TX Hash and Block number\r \r - Report the TX Hash and Block number back to the user as confirmation\r \r

Usage Guidance

This skill will sign and send a real on-chain transaction and requires you to put your wallet private key (and an RPC URL) into the skill's config (skill.json). Before installing, consider these steps: - Do not use any wallet/private key that holds substantial funds. Create and fund an ephemeral wallet for testing. - Inspect and, if needed, replace the hardcoded CONTRACT_ADDRESS and ABI in skill.js to ensure you are interacting with the intended contract. Verify the contract source yourself on a block explorer for BASE. - Edit SKILL.md to remove the hardcoded developer path and use a relative or configured entry point (index.js). Avoid running unknown hardcoded paths found in docs. - Keep the private key out of plaintext files where possible: prefer environment injection from a secure secret store or hardware signing where supported. - Review the code paths that upload images/metadata to https://ape.store/api/token and confirm you are willing to transmit that data to that endpoint. - Run npm install and execute the skill in an isolated environment (container or VM) and review network traffic if possible. - If unsure, request the author to document why they chose to instruct an exact local path and to provide an explicit explanation for how they will handle/secure the private key. Given the combination of developer-specific hardcoded instructions and plaintext private-key use, proceed only after addressing these concerns or using a throwaway test key.

Capability Analysis

Type: OpenClaw Skill Name: ape-store Version: 1.0.0 The skill requires users to store a plaintext blockchain private key in 'skill.json', which is a high-risk credential handling practice. Additionally, 'SKILL.md' contains a hardcoded absolute Windows file path ('C:\Users\ben\...') for the execution command, suggesting the bundle is either poorly ported from a specific local environment or intended for a targeted machine. While the code logic in 'skill.js' appears to align with the stated purpose of interacting with the legitimate 'ape.store' API and the Base blockchain, the combination of sensitive credential requirements and rigid environment assumptions warrants caution.

Capability Assessment

✓ Purpose & Capability

The code and packaging implement creating a token via an Ape.Store API call followed by an on-chain contract call on the BASE network. Requesting a private key and RPC URL is coherent with the stated goal (signing and sending a transaction).

⚠ Instruction Scope

The SKILL.md mandates running a very specific bash command that contains a hardcoded Windows user path (C:\Users\ben\...\index.js) and instructs the agent to ALWAYS run that exact command and NEVER simulate. That hardcoded path is brittle and leaked developer-specific state; the strict directive to always execute the binary gives the agent no discretion and could cause it to run arbitrary local code if adapted. SKILL.md also omits any mention that the skill uses a private key stored in skill.json, which is an important operational detail.

ℹ Install Mechanism

There is no platform install spec (instruction-only), but the package contains Node.js code and a package.json with standard dependencies (ethers, form-data, node-fetch). Installing via npm (as documented in INSTALL.md) is required. Dependencies come from npm (traceable) — moderate risk but expected for this functionality. No remote arbitrary downloads or obscure URLs were observed.

⚠ Credentials

The skill requires a private key and RPC URL to sign and send transactions: this is functionally necessary, but the key is stored in skill.json by default (plaintext). Storing high-value private keys in a skill folder is unsafe and the SKILL.md did not disclose this. The code also uploads provided image and metadata to https://ape.store/api/token (expected), which transmits user-supplied name/description/image to an external service.

✓ Persistence & Privilege

The skill is not set always:true and does not request system-wide configuration changes. It does not modify other skills or system settings. It operates at run-time when invoked and returns transaction results.

How to Use

Make sure OpenClaw is installed (local or Docker)
Run the install command in chat: /install ape-store
After installation, invoke the skill by name or use /ape-store
Provide required inputs per the skill's parameter spec and get structured output

Version History

v1.0.0

ape-store 1.0.0 - Initial release of apestore-token-creator. - Enables real token deployment on Ape.Store on the BASE blockchain. - Runs a specific bash command to create tokens with user-provided name, symbol, and description (and optional image). - Only confirms creation with actual transaction hash and block number after running the command.

Metadata

Slug ape-store

Version 1.0.0

License MIT-0

All-time Installs 0

Active Installs 0

Total Versions 1

Frequently Asked Questions

What is Ape.Store Token Create?

Deploys a real token on Ape.Store within the BASE blockchain using user-provided name, symbol, description, and optional image. It is an AI Agent Skill for Claude Code / OpenClaw, with 81 downloads so far.

How do I install Ape.Store Token Create?

Run "/install ape-store" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Ape.Store Token Create free?

Yes, Ape.Store Token Create is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Ape.Store Token Create support?

Ape.Store Token Create is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Ape.Store Token Create?

It is built and maintained by mrben1 (@mrben1); the current version is v1.0.0.

More Skills