← 返回 Skills 市场
1568
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install bnb-nft
功能描述
NFT operations on BNB Chain — get NFT metadata, check ownership, list NFTs by owner, transfer ERC-721 tokens, get collection info. Use for any NFT-related tasks on BSC.
使用说明 (SKILL.md)
BNB Chain NFT Skill
ERC-721 NFT operations on BNB Chain (BSC).
Setup
Requires Node.js and ethers.js:
cd ~/.openclaw/workspace/skills/bnb-nft && npm install ethers --silent
Configuration
For write operations (transfer, approve), set private key:
export BNB_PRIVATE_KEY="0x..."
Or pass with --key flag.
Usage
All operations use: nft.js
Get Collection Info
node nft.js collection \x3Ccontract_address>
Returns name, symbol, total supply (if available).
Get NFT Metadata
node nft.js metadata \x3Ccontract_address> \x3Ctoken_id>
Returns owner, tokenURI, and fetched metadata (if URI is HTTP).
Check NFT Owner
node nft.js owner \x3Ccontract_address> \x3Ctoken_id>
List NFTs Owned by Address
node nft.js owned \x3Ccontract_address> \x3Cwallet_address> [--limit 100]
Scans token IDs to find NFTs owned by wallet. Use --limit to cap the scan range.
Get Wallet's NFT Balance
node nft.js balance \x3Ccontract_address> \x3Cwallet_address>
Returns count of NFTs owned in collection.
Transfer NFT
node nft.js transfer \x3Ccontract_address> \x3Cto_address> \x3Ctoken_id> [--key \x3Cprivate_key>]
Approve NFT for Transfer
node nft.js approve \x3Ccontract_address> \x3Cspender_address> \x3Ctoken_id> [--key \x3Cprivate_key>]
Set Approval for All
node nft.js approve-all \x3Ccontract_address> \x3Coperator_address> \x3Ctrue|false> [--key \x3Cprivate_key>]
Check if Approved
node nft.js is-approved \x3Ccontract_address> \x3Ctoken_id> \x3Cspender_address>
Popular NFT Collections (BSC Mainnet)
| Collection | Address |
|---|---|
| Pancake Squad | 0x0a8901b0E25DEb55A87524f0cC164E9644020EBA |
| Pancake Bunnies | 0xDf7952B35f24aCF7fC0487D01c8d5690a60DBa07 |
| BakerySwap | 0x5d0915E32b1fb1144f27B87C9f65AC3f661C9e6D |
Security Notes
- Never commit private keys to git
- Always verify contract addresses before interacting
- Use testnet for testing transfers first
- Check approval status before marketplace listings
安全使用建议
This skill appears to do what it claims—interact with ERC‑721 contracts on BNB Chain—but take these precautions before installing or running it:
- The registry metadata omits runtime requirements: you need Node.js/npm to run nft.js and the SKILL.md asks you to run npm install. Don't run npm install in a sensitive environment without review.
- The SKILL.md mentions BNB_PRIVATE_KEY for write actions; the manifest didn't declare this env var. Only provide a private key if you trust the code and understand the risk. Prefer using a testnet key or an ephemeral wallet for testing.
- The script fetches tokenURI URLs (arbitrary HTTP(S) endpoints). Metadata fetches will contact third-party servers and the responses are printed to stdout — avoid sending logs/outputs to untrusted endpoints if you care about privacy.
- Verify BNB_RPC_URL (default is public Binance RPC). Consider using a trusted RPC provider or your own node to avoid MITM or rate-limiting issues.
- Review nft.js yourself (or have someone else review) before giving it access to any real private key. If you only need read-only info, avoid supplying a private key or run the read commands only.
If you want higher assurance, ask the skill author to declare required env vars (BNB_PRIVATE_KEY optional, BNB_RPC_URL optional) and required binaries (node/npm) in the registry metadata and to provide reproducible release/source provenance.
功能分析
Type: OpenClaw Skill
Name: bnb-nft
Version: 0.1.0
The skill bundle is classified as benign. The `SKILL.md` and `nft.js` files describe and implement standard ERC-721 NFT operations on the BNB Chain using the `ethers.js` library. While the skill requires access to a private key for write operations (transfer, approve), this is explicitly stated and necessary for its intended functionality, with instructions to provide it via an environment variable (`BNB_PRIVATE_KEY`) or CLI flag. There is no evidence of data exfiltration beyond the necessary blockchain interactions, malicious execution, persistence mechanisms, or prompt injection attempts against the OpenClaw agent. The `getMetadata` function fetches external `tokenURI` data, which is standard for NFTs, and the script only parses JSON without executing arbitrary code.
能力评估
Purpose & Capability
Name/description align with the included code: nft.js implements ERC-721 read/write operations on BNB Chain. The package.json and package-lock.json list ethers as the only dependency, which is appropriate for the stated purpose.
Instruction Scope
SKILL.md accurately documents commands and notes the need for a private key for write operations. However the skill's manifest declared no required env vars/binaries while the runtime instructions expect Node.js/npm and optionally BNB_PRIVATE_KEY and BNB_RPC_URL. SKILL.md also instructs running npm install ethers (network access) and fetching tokenURI HTTP URLs when present (fetches arbitrary metadata endpoints).
Install Mechanism
There is no automated install spec in the registry; installation is instruction-only (npm install). This pulls packages from the public npm registry (ethers and its dependencies) which is common for Node skills but is a moderate-risk action compared with instruction-only skills that require no package downloads.
Credentials
The only sensitive secret referenced is BNB_PRIVATE_KEY (used only for transfer/approve/setApprovalForAll operations) and an optional BNB_RPC_URL. These are proportionate to on-chain write operations. The manifest did not declare BNB_PRIVATE_KEY as a required env var, so the discrepancy should be noted before use.
Persistence & Privilege
The skill is not marked always:true and does not request persistent system-wide privileges. It is instruction-only and runs as a CLI script (no automatic background installation or modification of other skills).
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install bnb-nft - 安装完成后，直接呼叫该 Skill 的名称或使用
/bnb-nft触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release: ERC-721 operations on BNB Chain (BSC)
元数据
常见问题
BNB Chain NFT 是什么？
NFT operations on BNB Chain — get NFT metadata, check ownership, list NFTs by owner, transfer ERC-721 tokens, get collection info. Use for any NFT-related tasks on BSC. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1568 次。
如何安装 BNB Chain NFT？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install bnb-nft」即可一键安装，无需额外配置。
BNB Chain NFT 是免费的吗？
是的，BNB Chain NFT 完全免费（开源免费），可自由下载、安装和使用。
BNB Chain NFT 支持哪些平台？
BNB Chain NFT 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 BNB Chain NFT？
由 CLAWZAI（@clawzai）开发并维护，当前版本 v0.1.0。
推荐 Skills