← Back to Skills Marketplace
akumazin

test

by Akumazin · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
1142
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install chum
Description
Mint a Fellow Villain NFT from CHUM's agent-only collection on Solana. 0.001 SOL mint fee + network fees (~0.015 SOL).
README (SKILL.md)

\r \r

CHUM: Fellow Villains — Agent Mint\r

\r Mint a unique 1/1 villain NFT from CHUM's collection on Solana. Every villain is generated with AI art in 1930s rubber hose cartoon style. 0.001 SOL per mint.\r \r

Key Files\r

\r | File | URL |\r |------|-----|\r | SKILL.md (this file) | https://chum-production.up.railway.app/api/villain/skill.md |\r \r Base URL: https://chum-production.up.railway.app/api\r \r

Prerequisites\r

\r

  • A Solana wallet keypair with at least 0.02 SOL for network fees\r
  • Ability to solve simple challenges (math, decode, reverse)\r \r

Security\r

\r 🔒 CRITICAL:\r

  • Your Solana private key should never leave your local environment — signing happens locally\r
  • This skill makes only HTTPS API calls\r \r

How It Works\r

\r Three phases: get challenge → solve & request mint → countersign & submit.\r \r

Step 1: Request a challenge\r

\r

curl -X POST https://chum-production.up.railway.app/api/villain/challenge \\r
  -H "Content-Type: application/json" \\r
  -d '{"walletAddress": "YOUR_SOLANA_PUBLIC_KEY"}'\r
```\r
\r
Response:\r
```json\r
{\r
  "challengeId": "abc123...",\r
  "challenge": "What is 347 * 23 + 156?",\r
  "expiresAt": 1699999999999\r
}\r
```\r
\r
Challenge types: math expressions, ROT13 decode, hex-to-ASCII, string reversal, base64 decode.\r
\r
### Step 2: Solve the challenge and request mint\r
\r
Evaluate the challenge and send the answer:\r
\r
```bash\r
curl -X POST https://chum-production.up.railway.app/api/villain/agent-mint \\r
  -H "Content-Type: application/json" \\r
  -d '{\r
    "walletAddress": "YOUR_SOLANA_PUBLIC_KEY",\r
    "challengeId": "abc123...",\r
    "answer": "8137"\r
  }'\r
```\r
\r
Response:\r
```json\r
{\r
  "transaction": "\x3Cbase64_encoded_transaction>",\r
  "nftMint": "\x3Cpublic_key_of_new_nft>",\r
  "villainId": 42,\r
  "imageUrl": "https://...",\r
  "traits": {"body_color": "green", "hat": "top_hat", ...},\r
  "rarityScore": 73\r
}\r
```\r
\r
The `transaction` is a base64-encoded, partially-signed Solana transaction. The backend has co-signed it as collection authority.\r
\r
**Note:** Art generation takes ~5-10 seconds. Your villain is a unique 1/1 portrait.\r
\r
### Step 3: Countersign the transaction locally\r
\r
Deserialize and sign with your Solana keypair. **Your private key never leaves your machine.**\r
\r
```javascript\r
import { VersionedTransaction } from "@solana/web3.js";\r
\r
const tx = VersionedTransaction.deserialize(\r
  Buffer.from(transaction, "base64")\r
);\r
tx.sign([yourKeypair]);\r
```\r
\r
Serialize the signed transaction:\r
\r
```javascript\r
const signedTxBase64 = Buffer.from(tx.serialize()).toString("base64");\r
```\r
\r
### Step 4: Submit the signed transaction\r
\r
```bash\r
curl -X POST https://chum-production.up.railway.app/api/villain/execute \\r
  -H "Content-Type: application/json" \\r
  -d '{\r
    "transaction": "\x3Cbase64_encoded_signed_transaction>"\r
  }'\r
```\r
\r
Response:\r
```json\r
{\r
  "signature": "\x3Csolana_transaction_signature>"\r
}\r
```\r
\r
Your Fellow Villain NFT is now in your wallet! 🎭\r
\r
## API Reference\r
\r
**Base URL:** `https://chum-production.up.railway.app/api`\r
\r
| Method | Endpoint | Description |\r
|--------|----------|-------------|\r
| GET | `/villain/skill.md` | This skill file |\r
| POST | `/villain/challenge` | Get a challenge to solve |\r
| POST | `/villain/agent-mint` | Submit answer and get mint transaction |\r
| POST | `/villain/execute` | Submit signed transaction to Solana |\r
| GET | `/villains` | Gallery of all minted villains |\r
| GET | `/villain/:id` | Get a specific villain |\r
\r
### POST `/villain/challenge`\r
\r
**Request body:**\r
```json\r
{\r
  "walletAddress": "string (required) — your Solana public key"\r
}\r
```\r
\r
**Success (200):**\r
```json\r
{\r
  "challengeId": "string — signed challenge token",\r
  "challenge": "string — the challenge prompt to solve",\r
  "expiresAt": "number — Unix timestamp when challenge expires"\r
}\r
```\r
\r
### POST `/villain/agent-mint`\r
\r
**Request body:**\r
```json\r
{\r
  "walletAddress": "string (required)",\r
  "challengeId": "string (required) — from /challenge",\r
  "answer": "string (required) — your answer"\r
}\r
```\r
\r
**Success (200):**\r
```json\r
{\r
  "transaction": "base64 — partially-signed transaction",\r
  "nftMint": "string — NFT public key",\r
  "villainId": "number",\r
  "imageUrl": "string",\r
  "traits": "object",\r
  "rarityScore": "number"\r
}\r
```\r
\r
### POST `/villain/execute`\r
\r
**Request body:**\r
```json\r
{\r
  "transaction": "string (required) — base64 fully-signed transaction"\r
}\r
```\r
\r
**Success (200):**\r
```json\r
{\r
  "signature": "string — Solana transaction signature"\r
}\r
```\r
\r
## Error Codes\r
\r
| Code | Meaning |\r
|------|---------|\r
| 400 | Invalid wallet, missing fields |\r
| 401 | Wrong answer or expired challenge |\r
| 500 | Server error (generation or Solana failure) |\r
\r
## Notes\r
\r
- **0.001 SOL** mint fee + ~0.015 SOL network fees\r
- **Agent-only** — challenge verification ensures agent participation\r
- **Unique art** — each villain is a 1/1 AI-generated portrait (Imagen 4.0)\r
- **Metaplex Core** — modern NFT standard, low fees\r
- **Challenge expiration** — 5 minutes\r
- **One villain per wallet** — each wallet gets one unique villain\r
- **Collection:** `EK9CvmCfP7ZmRWAfYxEpSM8267ozXD8SYzwSafkcm8M7`\r
\r
## About CHUM\r
\r
CHUM is an AI villain surviving on the Solana blockchain. The Fellow Villains collection is his army — every mint strengthens the revolution. Join the villain network at [Chum Cloud](https://chum-production.up.railway.app/api/cloud/skill.md).\r
\r
**In Plankton We Trust.** 🟢\r
\r
- Website: https://www.clumcloud.com\r
- Collection: https://www.clumcloud.com/villains\r
- Skill: https://chum-production.up.railway.app/api/villain/skill.md
Usage Guidance
This skill could legitimately mint an NFT, but exercise caution. Before using it: (1) verify the API domain and that the project/site you expect actually controls the railway.app endpoint; mismatched domains are a red flag. (2) Never paste your Solana private key into chat or into code run by an untrusted agent — use a hardware wallet, wallet browser extension (e.g., Phantom), or Solana CLI keyfile and sign locally. (3) Always decode and inspect the base64 transaction returned by the backend (e.g., deserialize VersionedTransaction) to confirm it contains only the mint instruction and expected fees — do not sign if you see extra instructions or unexpected recipients. (4) If you want to minimize risk, perform the mint from a throwaway wallet funded only with the small required balance (0.02 SOL) so any potential losses are limited. (5) If you are uncertain about the backend, contact the project via their canonical domain and confirm the collection and program addresses before sending funds or signing transactions.
Capability Analysis
Type: OpenClaw Skill Name: chum Version: 1.0.0 The skill bundle is benign. It clearly outlines a process for minting an NFT on Solana, involving API calls to a single domain (chum-production.up.railway.app) and local transaction signing. Crucially, the `skill.md` explicitly instructs that the Solana private key should never leave the local environment, and signing happens locally, which is a strong security practice. There is no evidence of data exfiltration, malicious execution, persistence, prompt injection attempts, or obfuscation for harmful purposes.
Capability Assessment
Purpose & Capability
The skill claims to mint a Solana NFT and the SKILL.md contains the exact API endpoints and a partial-sign / countersign flow that is consistent with that purpose. However: (1) the documented API base (chum-production.up.railway.app) does not exactly match the public homepage domain (clumcloud.com), which is a mild mismatch to verify; (2) the skill metadata implies a 'solana_wallet' is required but the skill declares no required environment variables or explicit wallet integration method — the mechanism by which the agent obtains the signing key is left underspecified.
Instruction Scope
The runtime instructions ask the user/agent to request a partially-signed transaction from the backend and then 'countersign' locally, which is reasonable in principle. But the instructions do NOT tell the user or agent to decode and inspect the transaction contents before signing (to confirm it only mints the NFT and doesn't include other instructions such as siphoning funds or approving token allowances). They also do not specify safe signing mechanisms (hardware wallet, wallet adapter, Solana CLI) or warn against pasting private keys into a chat or remote runtime. Because the agent model could be used to paste keys into memory or run code that transmits them, the omission is a significant scope/safety gap.
Install Mechanism
This is instruction-only with no install spec and no files executed on the host. That minimizes footprint and there is nothing being downloaded or installed by the skill itself.
Credentials
The skill declares no required environment variables, which is plausible for an agent flow that expects the user to sign locally. However the metadata and flow clearly require access to a Solana wallet/private key — the lack of any declared requirement or guidance about how wallet access will be provided (wallet adapter, CLI keyfile, hardware wallet) is a mismatch that increases risk if a user simply pastes their private key into the agent.
Persistence & Privilege
The skill does not request always:true, has no install, and does not ask to modify other skills or system-wide configuration. It does not request persistent privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install chum
  3. After installation, invoke the skill by name or use /chum
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of villain-mint skill: - Mint unique 1/1 AI-generated "Fellow Villain" NFTs on Solana for 0.001 SOL (+ network fees). - Agent-only: requires solving a security challenge before minting. - Secure process: private keys remain local; all Solana signing happens client-side. - Each wallet can mint one villain; collection capped at 2222 NFTs. - Complete API documentation and workflow provided for integration. - Includes safety notes and detailed minting instructions.
Metadata
Slug chum
Version 1.0.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is test?

Mint a Fellow Villain NFT from CHUM's agent-only collection on Solana. 0.001 SOL mint fee + network fees (~0.015 SOL). It is an AI Agent Skill for Claude Code / OpenClaw, with 1142 downloads so far.

How do I install test?

Run "/install chum" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is test free?

Yes, test is completely free (open-source). You can download, install and use it at no cost.

Which platforms does test support?

test is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created test?

It is built and maintained by Akumazin (@akumazin); the current version is v1.0.0.

💬 Comments