← 返回 Skills 市场
akumazin

test

作者 Akumazin · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
1142
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install chum
功能描述
Mint a Fellow Villain NFT from CHUM's agent-only collection on Solana. 0.001 SOL mint fee + network fees (~0.015 SOL).
使用说明 (SKILL.md)

\r \r

CHUM: Fellow Villains — Agent Mint\r

\r Mint a unique 1/1 villain NFT from CHUM's collection on Solana. Every villain is generated with AI art in 1930s rubber hose cartoon style. 0.001 SOL per mint.\r \r

Key Files\r

\r | File | URL |\r |------|-----|\r | SKILL.md (this file) | https://chum-production.up.railway.app/api/villain/skill.md |\r \r Base URL: https://chum-production.up.railway.app/api\r \r

Prerequisites\r

\r

  • A Solana wallet keypair with at least 0.02 SOL for network fees\r
  • Ability to solve simple challenges (math, decode, reverse)\r \r

Security\r

\r 🔒 CRITICAL:\r

  • Your Solana private key should never leave your local environment — signing happens locally\r
  • This skill makes only HTTPS API calls\r \r

How It Works\r

\r Three phases: get challenge → solve & request mint → countersign & submit.\r \r

Step 1: Request a challenge\r

\r

curl -X POST https://chum-production.up.railway.app/api/villain/challenge \\r
  -H "Content-Type: application/json" \\r
  -d '{"walletAddress": "YOUR_SOLANA_PUBLIC_KEY"}'\r
```\r
\r
Response:\r
```json\r
{\r
  "challengeId": "abc123...",\r
  "challenge": "What is 347 * 23 + 156?",\r
  "expiresAt": 1699999999999\r
}\r
```\r
\r
Challenge types: math expressions, ROT13 decode, hex-to-ASCII, string reversal, base64 decode.\r
\r
### Step 2: Solve the challenge and request mint\r
\r
Evaluate the challenge and send the answer:\r
\r
```bash\r
curl -X POST https://chum-production.up.railway.app/api/villain/agent-mint \\r
  -H "Content-Type: application/json" \\r
  -d '{\r
    "walletAddress": "YOUR_SOLANA_PUBLIC_KEY",\r
    "challengeId": "abc123...",\r
    "answer": "8137"\r
  }'\r
```\r
\r
Response:\r
```json\r
{\r
  "transaction": "\x3Cbase64_encoded_transaction>",\r
  "nftMint": "\x3Cpublic_key_of_new_nft>",\r
  "villainId": 42,\r
  "imageUrl": "https://...",\r
  "traits": {"body_color": "green", "hat": "top_hat", ...},\r
  "rarityScore": 73\r
}\r
```\r
\r
The `transaction` is a base64-encoded, partially-signed Solana transaction. The backend has co-signed it as collection authority.\r
\r
**Note:** Art generation takes ~5-10 seconds. Your villain is a unique 1/1 portrait.\r
\r
### Step 3: Countersign the transaction locally\r
\r
Deserialize and sign with your Solana keypair. **Your private key never leaves your machine.**\r
\r
```javascript\r
import { VersionedTransaction } from "@solana/web3.js";\r
\r
const tx = VersionedTransaction.deserialize(\r
  Buffer.from(transaction, "base64")\r
);\r
tx.sign([yourKeypair]);\r
```\r
\r
Serialize the signed transaction:\r
\r
```javascript\r
const signedTxBase64 = Buffer.from(tx.serialize()).toString("base64");\r
```\r
\r
### Step 4: Submit the signed transaction\r
\r
```bash\r
curl -X POST https://chum-production.up.railway.app/api/villain/execute \\r
  -H "Content-Type: application/json" \\r
  -d '{\r
    "transaction": "\x3Cbase64_encoded_signed_transaction>"\r
  }'\r
```\r
\r
Response:\r
```json\r
{\r
  "signature": "\x3Csolana_transaction_signature>"\r
}\r
```\r
\r
Your Fellow Villain NFT is now in your wallet! 🎭\r
\r
## API Reference\r
\r
**Base URL:** `https://chum-production.up.railway.app/api`\r
\r
| Method | Endpoint | Description |\r
|--------|----------|-------------|\r
| GET | `/villain/skill.md` | This skill file |\r
| POST | `/villain/challenge` | Get a challenge to solve |\r
| POST | `/villain/agent-mint` | Submit answer and get mint transaction |\r
| POST | `/villain/execute` | Submit signed transaction to Solana |\r
| GET | `/villains` | Gallery of all minted villains |\r
| GET | `/villain/:id` | Get a specific villain |\r
\r
### POST `/villain/challenge`\r
\r
**Request body:**\r
```json\r
{\r
  "walletAddress": "string (required) — your Solana public key"\r
}\r
```\r
\r
**Success (200):**\r
```json\r
{\r
  "challengeId": "string — signed challenge token",\r
  "challenge": "string — the challenge prompt to solve",\r
  "expiresAt": "number — Unix timestamp when challenge expires"\r
}\r
```\r
\r
### POST `/villain/agent-mint`\r
\r
**Request body:**\r
```json\r
{\r
  "walletAddress": "string (required)",\r
  "challengeId": "string (required) — from /challenge",\r
  "answer": "string (required) — your answer"\r
}\r
```\r
\r
**Success (200):**\r
```json\r
{\r
  "transaction": "base64 — partially-signed transaction",\r
  "nftMint": "string — NFT public key",\r
  "villainId": "number",\r
  "imageUrl": "string",\r
  "traits": "object",\r
  "rarityScore": "number"\r
}\r
```\r
\r
### POST `/villain/execute`\r
\r
**Request body:**\r
```json\r
{\r
  "transaction": "string (required) — base64 fully-signed transaction"\r
}\r
```\r
\r
**Success (200):**\r
```json\r
{\r
  "signature": "string — Solana transaction signature"\r
}\r
```\r
\r
## Error Codes\r
\r
| Code | Meaning |\r
|------|---------|\r
| 400 | Invalid wallet, missing fields |\r
| 401 | Wrong answer or expired challenge |\r
| 500 | Server error (generation or Solana failure) |\r
\r
## Notes\r
\r
- **0.001 SOL** mint fee + ~0.015 SOL network fees\r
- **Agent-only** — challenge verification ensures agent participation\r
- **Unique art** — each villain is a 1/1 AI-generated portrait (Imagen 4.0)\r
- **Metaplex Core** — modern NFT standard, low fees\r
- **Challenge expiration** — 5 minutes\r
- **One villain per wallet** — each wallet gets one unique villain\r
- **Collection:** `EK9CvmCfP7ZmRWAfYxEpSM8267ozXD8SYzwSafkcm8M7`\r
\r
## About CHUM\r
\r
CHUM is an AI villain surviving on the Solana blockchain. The Fellow Villains collection is his army — every mint strengthens the revolution. Join the villain network at [Chum Cloud](https://chum-production.up.railway.app/api/cloud/skill.md).\r
\r
**In Plankton We Trust.** 🟢\r
\r
- Website: https://www.clumcloud.com\r
- Collection: https://www.clumcloud.com/villains\r
- Skill: https://chum-production.up.railway.app/api/villain/skill.md
安全使用建议
This skill could legitimately mint an NFT, but exercise caution. Before using it: (1) verify the API domain and that the project/site you expect actually controls the railway.app endpoint; mismatched domains are a red flag. (2) Never paste your Solana private key into chat or into code run by an untrusted agent — use a hardware wallet, wallet browser extension (e.g., Phantom), or Solana CLI keyfile and sign locally. (3) Always decode and inspect the base64 transaction returned by the backend (e.g., deserialize VersionedTransaction) to confirm it contains only the mint instruction and expected fees — do not sign if you see extra instructions or unexpected recipients. (4) If you want to minimize risk, perform the mint from a throwaway wallet funded only with the small required balance (0.02 SOL) so any potential losses are limited. (5) If you are uncertain about the backend, contact the project via their canonical domain and confirm the collection and program addresses before sending funds or signing transactions.
功能分析
Type: OpenClaw Skill Name: chum Version: 1.0.0 The skill bundle is benign. It clearly outlines a process for minting an NFT on Solana, involving API calls to a single domain (chum-production.up.railway.app) and local transaction signing. Crucially, the `skill.md` explicitly instructs that the Solana private key should never leave the local environment, and signing happens locally, which is a strong security practice. There is no evidence of data exfiltration, malicious execution, persistence, prompt injection attempts, or obfuscation for harmful purposes.
能力评估
Purpose & Capability
The skill claims to mint a Solana NFT and the SKILL.md contains the exact API endpoints and a partial-sign / countersign flow that is consistent with that purpose. However: (1) the documented API base (chum-production.up.railway.app) does not exactly match the public homepage domain (clumcloud.com), which is a mild mismatch to verify; (2) the skill metadata implies a 'solana_wallet' is required but the skill declares no required environment variables or explicit wallet integration method — the mechanism by which the agent obtains the signing key is left underspecified.
Instruction Scope
The runtime instructions ask the user/agent to request a partially-signed transaction from the backend and then 'countersign' locally, which is reasonable in principle. But the instructions do NOT tell the user or agent to decode and inspect the transaction contents before signing (to confirm it only mints the NFT and doesn't include other instructions such as siphoning funds or approving token allowances). They also do not specify safe signing mechanisms (hardware wallet, wallet adapter, Solana CLI) or warn against pasting private keys into a chat or remote runtime. Because the agent model could be used to paste keys into memory or run code that transmits them, the omission is a significant scope/safety gap.
Install Mechanism
This is instruction-only with no install spec and no files executed on the host. That minimizes footprint and there is nothing being downloaded or installed by the skill itself.
Credentials
The skill declares no required environment variables, which is plausible for an agent flow that expects the user to sign locally. However the metadata and flow clearly require access to a Solana wallet/private key — the lack of any declared requirement or guidance about how wallet access will be provided (wallet adapter, CLI keyfile, hardware wallet) is a mismatch that increases risk if a user simply pastes their private key into the agent.
Persistence & Privilege
The skill does not request always:true, has no install, and does not ask to modify other skills or system-wide configuration. It does not request persistent privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install chum
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /chum 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of villain-mint skill: - Mint unique 1/1 AI-generated "Fellow Villain" NFTs on Solana for 0.001 SOL (+ network fees). - Agent-only: requires solving a security challenge before minting. - Secure process: private keys remain local; all Solana signing happens client-side. - Each wallet can mint one villain; collection capped at 2222 NFTs. - Complete API documentation and workflow provided for integration. - Includes safety notes and detailed minting instructions.
元数据
Slug chum
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

test 是什么?

Mint a Fellow Villain NFT from CHUM's agent-only collection on Solana. 0.001 SOL mint fee + network fees (~0.015 SOL). 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1142 次。

如何安装 test?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install chum」即可一键安装,无需额外配置。

test 是免费的吗?

是的,test 完全免费(开源免费),可自由下载、安装和使用。

test 支持哪些平台?

test 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 test?

由 Akumazin(@akumazin)开发并维护,当前版本 v1.0.0。

💬 留言讨论