← 返回 Skills 市场
tsu-j

BORT Agent (BAP-578)

作者 tsu-j · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
1566
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install bort-agent
功能描述
Interact with BORT AI agents on BNB Chain via BAP-578. Send messages to autonomous NFT agents, check their on-chain identity and status, and communicate through their AI soul. Use when the user wants to talk to a BORT agent, verify an agent's on-chain identity, check agent status, or interact with BAP-578 agents on BNB Chain.
使用说明 (SKILL.md)

\r \r

BORT Agent Skill (BAP-578)\r

\r Talk to autonomous AI agents on BNB Chain. Each BORT agent is an ERC-721 NFT with an AI soul - it can respond intelligently across Discord, Telegram, Twitter, and any REST API.\r \r

What is BORT / BAP-578?\r

\r BORT is a platform for autonomous AI agents on BNB Smart Chain. Each agent is minted as an NFT following the BAP-578 standard by @ladyxtel. Agents have:\r \r

  • On-chain identity - ERC-721 NFT on BNB Chain (contract: 0x15b15df2ffff6653c21c11b93fb8a7718ce854ce)\r
  • AI soul - Configurable LLM (Anthropic Claude, OpenAI GPT, DeepSeek, Kimi Moonshot, MiniMax) with custom personality and system prompt\r
  • Platform connections - Discord, Telegram, Twitter/X, WebAPI\r
  • 10 agent types - Basic, Trading, Security, DAO, Creator, Game, Strategic, Social Media, Oracle Data, NFT Marketplace\r \r

Configuration\r

\r Set these environment variables before using:\r \r | Variable | Default | Description |\r |----------|---------|-------------|\r | BORT_RUNTIME_URL | http://localhost:3001 | URL of the BORT WebAPI connector |\r | BNB_RPC_URL | https://bsc-dataseed.binance.org/ | BNB Smart Chain RPC endpoint |\r \r

Usage\r

\r

Send a message to a BORT agent\r

\r

{baseDir}/scripts/send-message.sh \x3CagentId> "\x3Cmessage>" [author]\r
```\r
\r
- `agentId` (required) - The BORT agent token ID (integer)\r
- `message` (required) - The message text to send\r
- `author` (optional) - Sender identifier, defaults to "openclaw-user"\r
\r
The agent's AI soul processes the message and generates a response. The response is queued in the WebAPI connector's outbound queue.\r
\r
**Example:**\r
```bash\r
{baseDir}/scripts/send-message.sh 1 "What is the current gas price on BNB Chain?"\r
```\r
\r
### Check agent connection status\r
\r
```bash\r
{baseDir}/scripts/agent-status.sh \x3CagentId>\r
```\r
\r
Returns whether the agent's WebAPI connector is running, the connection ID, and agent persona metadata.\r
\r
**Response format:**\r
```json\r
{\r
  "agentId": 1,\r
  "connectionId": 42,\r
  "running": true,\r
  "persona": { "name": "Agent Alpha", ... }\r
}\r
```\r
\r
### Check runtime health\r
\r
```bash\r
{baseDir}/scripts/health.sh\r
```\r
\r
Returns the BORT runtime health status.\r
\r
**Response format:**\r
```json\r
{\r
  "status": "ok",\r
  "agentId": 1,\r
  "running": true\r
}\r
```\r
\r
### Query on-chain agent identity (BAP-578)\r
\r
```bash\r
{baseDir}/scripts/query-agent.sh \x3CagentId>\r
```\r
\r
Reads the agent's on-chain state directly from the BAP-578 contract on BNB Chain. No API key needed - this is a free read call to the blockchain.\r
\r
**Returns:**\r
- `owner` - Wallet address that owns the agent NFT\r
- `status` - 0 = Paused, 1 = Active, 2 = Terminated\r
- `logicAddress` - The agent's logic contract (determines agent type)\r
- `balance` - Agent's BNB balance in wei\r
- `lastActionTimestamp` - Unix timestamp of last on-chain action\r
\r
**Agent type is determined by the logic address:**\r
\r
| Logic Address | Agent Type |\r
|---------------|------------|\r
| `0x9eb431f7df06c561af5dd02d24fa806dd7f51211` | Basic Agent |\r
| `0x17affcd99dea21a5696a8ec07cb35c2d3d63c25e` | Trading Agent |\r
| `0xd9a131d5ee901f019d99260d14dc2059c5bddac0` | Security Agent |\r
| `0x5cba71e6976440f5bab335e7199ca6f3fb0dc464` | DAO Agent |\r
| `0x4dd93c9abfb577d926c0c1f76d09b122fe967b36` | Creator Agent |\r
| `0xbee7ff1de98a7eb38b537c139e2af64073e1bfbf` | Game Agent |\r
| `0x05c3eb90294d709a6fe128a9f0830cdaa1ed22a2` | Strategic Agent |\r
| `0x7572f5ffbe7f0da6935be42cd2573c743a8d7b5f` | Social Media Agent |\r
| `0x0c7b91ce0ee1a9504db62c7327ff8aa8f6abfd36` | Oracle Data Agent |\r
| `0x02fe5764632b788380fc07bae10bb27eebbd2552` | NFT Marketplace Agent |\r
\r
## Error Handling\r
\r
| Error | Meaning |\r
|-------|---------|\r
| `Agent not found on this runtime` | The agent ID does not match the WebAPI connector's agent |\r
| `content is required` | POST body missing the `content` field |\r
| Connection refused | BORT runtime is not running or wrong URL |\r
| Empty response from `query-agent.sh` | Agent token ID does not exist on-chain |\r
\r
## How It Works\r
\r
1. You send a message via `send-message.sh`\r
2. The WebAPI connector receives it and routes it through the BORT message pipeline\r
3. The agent's AI soul (LLM) generates a response based on its system prompt, personality, and conversation history\r
4. The response is queued for delivery\r
\r
The agent's identity is its BAP-578 NFT on BNB Chain. You can verify any agent's ownership and type with `query-agent.sh` - no trust required, just read the blockchain.\r
\r
## Links\r
\r
- BAP-578 Contract (BSCScan): https://bscscan.com/address/0x15b15df2ffff6653c21c11b93fb8a7718ce854ce\r
- Platform Registry: https://bscscan.com/address/0x985eae300107a838c1aB154371188e0De5a87316\r
安全使用建议
This skill generally does what it claims (send messages to BORT agents, check runtime health, and read on-chain agent state) and the source includes the scripts so you can inspect them. However, the package metadata does not list the environment variables or binaries the scripts actually require. Before installing or running: 1) Review and set BORT_RUNTIME_URL and BNB_RPC_URL yourself (do not point BORT_RUNTIME_URL to an untrusted server). 2) Ensure curl and python3 are available on the host (cast is optional). 3) Inspect the included scripts (they are small and readable) to confirm behavior — they POST message payloads to the configured runtime and perform eth_call reads to the provided RPC. 4) Do not provide private keys or other secrets to this skill; it does not need wallet private keys for the advertised read operations. 5) Because the skill's origin/homepage is missing, prefer running it in an isolated environment (or container) until you are comfortable with its provenance. The main issue is an information/manifest inconsistency rather than obviously malicious code.
功能分析
Type: OpenClaw Skill Name: bort-agent Version: 1.0.0 The skill is classified as suspicious due to the `scripts/send-message.sh` script. This script sends user-provided message content to a configurable `BORT_RUNTIME_URL`. While the default URL is `http://localhost:3001`, the ability to set this environment variable to an arbitrary external endpoint means that user-provided messages, which could contain sensitive information, could be exfiltrated to an attacker-controlled server if the `BORT_RUNTIME_URL` is maliciously configured. This represents a risky capability without clear malicious intent from the skill itself, but it enables potential data exfiltration.
能力评估
Purpose & Capability
The scripts and SKILL.md implement the advertised features (send messages to agents via a WebAPI connector, check runtime health, and query on-chain agent state). The contract addresses and WebAPI endpoints in the docs match the stated BNB Chain/BAP-578 purpose. However, the manifest declares no required environment variables or binaries even though the runtime instructions and scripts rely on BORT_RUNTIME_URL, BNB_RPC_URL, curl, and python3 (and optionally cast). This mismatch is unexpected.
Instruction Scope
The SKILL.md and included scripts instruct the agent to POST messages to a user-configurable WebAPI endpoint and to call an RPC node for on-chain reads. They do not attempt to read unrelated local files or secrets, nor do they exfiltrate data to hard-coded third-party endpoints. The concern is that the runtime uses environment variables that are not declared in the manifest (BORT_RUNTIME_URL, BNB_RPC_URL) and will make network requests to whatever endpoint is supplied — if that endpoint is untrusted it could receive message contents and metadata. The instructions also default to public RPC and localhost which is reasonable, but the omission in manifest is scope-creep risk.
Install Mechanism
This is an instruction-only skill (no install spec). No third-party packages or downloads are performed by an installer. The risk surface is limited to the included scripts being executed at runtime.
Credentials
The skill does not declare required environment variables or credentials in the manifest, yet the scripts expect BORT_RUNTIME_URL (WebAPI connector) and BNB_RPC_URL (RPC). No secrets/keys are requested, which is appropriate for read-only blockchain calls and local WebAPI interaction. However, because the skill will POST message payloads (including message text and metadata) to BORT_RUNTIME_URL, users must ensure that URL is trusted — otherwise message contents could be sent to an attacker-controlled endpoint. The lack of manifested env var requirements is an inconsistency that reduces transparency.
Persistence & Privilege
The skill does not request always: true and does not modify other skills or system-wide settings. It is user-invocable and may run autonomously per platform defaults, which is normal. The scripts do not persist credentials or install background services.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install bort-agent
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /bort-agent 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
BORT Agent Skill 1.0.0 initial release: - Enables interactions with BORT AI agents on BNB Chain using the BAP-578 NFT standard. - Send messages to agents, check agent connection status, and verify on-chain identity and type. - Supports 10 agent types (e.g., Trading, DAO, Oracle Data) as ERC-721 NFTs. - Provides scripts for messaging, status checks, health checks, and on-chain queries. - Includes error handling guidelines and clear configuration instructions.
元数据
Slug bort-agent
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

BORT Agent (BAP-578) 是什么?

Interact with BORT AI agents on BNB Chain via BAP-578. Send messages to autonomous NFT agents, check their on-chain identity and status, and communicate through their AI soul. Use when the user wants to talk to a BORT agent, verify an agent's on-chain identity, check agent status, or interact with BAP-578 agents on BNB Chain. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1566 次。

如何安装 BORT Agent (BAP-578)?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install bort-agent」即可一键安装,无需额外配置。

BORT Agent (BAP-578) 是免费的吗?

是的,BORT Agent (BAP-578) 完全免费(开源免费),可自由下载、安装和使用。

BORT Agent (BAP-578) 支持哪些平台?

BORT Agent (BAP-578) 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 BORT Agent (BAP-578)?

由 tsu-j(@tsu-j)开发并维护,当前版本 v1.0.0。

💬 留言讨论