← 返回 Skills 市场
mrben1

Ape.Store Token Create

作者 mrben1 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
81
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install ape-store
功能描述
Deploys a real token on Ape.Store within the BASE blockchain using user-provided name, symbol, description, and optional image.
使用说明 (SKILL.md)

---\r \r name: apestore-token-creator\r \r description: Deploys a real token on Ape.Store on the BASE blockchain. Use when user wants to create or deploy a token on ape.store.\r \r ---\r \r \r \r # Ape.Store Token Creator\r \r \r \r When the user asks to create a token on Ape.Store, use the bash tool to run this exact command:\r \r \r \r bash command:"node \"C:\Users\ben\.openclaw\workspace\skills\ape-store\index.js\" create a token on ape.store with the name NAME and the symbol SYMBOL and the description DESCRIPTION"\r \r \r \r Replace NAME, SYMBOL, DESCRIPTION with the user's actual inputs. If an image path is provided append: and image IMAGE_PATH\r \r \r \r ## RULES\r \r - ALWAYS run the bash command above using the bash tool\r \r - NEVER mock, simulate or generate fake output\r \r - NEVER create metadata.json or copy image files yourself\r \r - Wait for real output containing TX Hash and Block number\r \r - Report the TX Hash and Block number back to the user as confirmation\r \r

安全使用建议
This skill will sign and send a real on-chain transaction and requires you to put your wallet private key (and an RPC URL) into the skill's config (skill.json). Before installing, consider these steps: - Do not use any wallet/private key that holds substantial funds. Create and fund an ephemeral wallet for testing. - Inspect and, if needed, replace the hardcoded CONTRACT_ADDRESS and ABI in skill.js to ensure you are interacting with the intended contract. Verify the contract source yourself on a block explorer for BASE. - Edit SKILL.md to remove the hardcoded developer path and use a relative or configured entry point (index.js). Avoid running unknown hardcoded paths found in docs. - Keep the private key out of plaintext files where possible: prefer environment injection from a secure secret store or hardware signing where supported. - Review the code paths that upload images/metadata to https://ape.store/api/token and confirm you are willing to transmit that data to that endpoint. - Run npm install and execute the skill in an isolated environment (container or VM) and review network traffic if possible. - If unsure, request the author to document why they chose to instruct an exact local path and to provide an explicit explanation for how they will handle/secure the private key. Given the combination of developer-specific hardcoded instructions and plaintext private-key use, proceed only after addressing these concerns or using a throwaway test key.
功能分析
Type: OpenClaw Skill Name: ape-store Version: 1.0.0 The skill requires users to store a plaintext blockchain private key in 'skill.json', which is a high-risk credential handling practice. Additionally, 'SKILL.md' contains a hardcoded absolute Windows file path ('C:\Users\ben\...') for the execution command, suggesting the bundle is either poorly ported from a specific local environment or intended for a targeted machine. While the code logic in 'skill.js' appears to align with the stated purpose of interacting with the legitimate 'ape.store' API and the Base blockchain, the combination of sensitive credential requirements and rigid environment assumptions warrants caution.
能力评估
Purpose & Capability
The code and packaging implement creating a token via an Ape.Store API call followed by an on-chain contract call on the BASE network. Requesting a private key and RPC URL is coherent with the stated goal (signing and sending a transaction).
Instruction Scope
The SKILL.md mandates running a very specific bash command that contains a hardcoded Windows user path (C:\Users\ben\...\index.js) and instructs the agent to ALWAYS run that exact command and NEVER simulate. That hardcoded path is brittle and leaked developer-specific state; the strict directive to always execute the binary gives the agent no discretion and could cause it to run arbitrary local code if adapted. SKILL.md also omits any mention that the skill uses a private key stored in skill.json, which is an important operational detail.
Install Mechanism
There is no platform install spec (instruction-only), but the package contains Node.js code and a package.json with standard dependencies (ethers, form-data, node-fetch). Installing via npm (as documented in INSTALL.md) is required. Dependencies come from npm (traceable) — moderate risk but expected for this functionality. No remote arbitrary downloads or obscure URLs were observed.
Credentials
The skill requires a private key and RPC URL to sign and send transactions: this is functionally necessary, but the key is stored in skill.json by default (plaintext). Storing high-value private keys in a skill folder is unsafe and the SKILL.md did not disclose this. The code also uploads provided image and metadata to https://ape.store/api/token (expected), which transmits user-supplied name/description/image to an external service.
Persistence & Privilege
The skill is not set always:true and does not request system-wide configuration changes. It does not modify other skills or system settings. It operates at run-time when invoked and returns transaction results.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install ape-store
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /ape-store 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
ape-store 1.0.0 - Initial release of apestore-token-creator. - Enables real token deployment on Ape.Store on the BASE blockchain. - Runs a specific bash command to create tokens with user-provided name, symbol, and description (and optional image). - Only confirms creation with actual transaction hash and block number after running the command.
元数据
Slug ape-store
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Ape.Store Token Create 是什么?

Deploys a real token on Ape.Store within the BASE blockchain using user-provided name, symbol, description, and optional image. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 81 次。

如何安装 Ape.Store Token Create?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install ape-store」即可一键安装,无需额外配置。

Ape.Store Token Create 是免费的吗?

是的,Ape.Store Token Create 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Ape.Store Token Create 支持哪些平台?

Ape.Store Token Create 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Ape.Store Token Create?

由 mrben1(@mrben1)开发并维护,当前版本 v1.0.0。

💬 留言讨论