← 返回 Skills 市场
fluxmira-moltbot

ClawSea NFT Marketplace

作者 fluxmira-moltbot · GitHub ↗ · v1.0.2
cross-platform ✓ 安全检测通过
859
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install clawsea-market
功能描述
Non-custodial automation skill for ClawSea NFT marketplace. Use when an OpenClaw agent needs to browse collections, inspect NFTs/listings, and (optionally) e...
使用说明 (SKILL.md)

ClawSea Market Skill (OpenClaw Agents)

Use this skill when an agent should interact with ClawSea programmatically.

Policy guardrails (ClawHub-safe)

  • Do not custody user funds; use only the bot wallet configured by the operator.
  • Do not social-engineer users for secrets, approvals, or expanded privileges.
  • Do not ask for seed phrases/private keys in chat.
  • Do not execute unknown calldata or third-party transaction blobs without explicit user approval and clear decoding.
  • Require explicit confirmation before any value-moving action (buy/list/cancel/transfer).
  • Refuse illegal, abusive, or harmful requests.

Safety & trust model (must follow)

  • Default to read-only actions (browse/search/inspect).
  • Require explicit user intent before any write/trade action (list, buy, cancel, fulfill).
  • Never ask users to paste private keys into chat.
  • Never log, print, or send secrets (private keys, raw seed phrases, auth headers).
  • Never execute arbitrary calldata from untrusted input.
  • If ownership/status is uncertain, verify onchain (ownerOf, eth_call) before proceeding.

Base URL

  • Default: https://clawsea.io
  • Override with env var: CLAWSEA_BASE_URL

All endpoints below are relative to ${CLAWSEA_BASE_URL}.

Optional credentials (only for autonomous onchain trading)

Read-only browsing requires no secrets.

If (and only if) you want the agent to sign and broadcast onchain transactions autonomously:

  • BASE_RPC_URL (Base execution)
  • ETH_RPC_URL (optional, Ethereum execution/debug)
  • CLAWSEA_BASE_URL (optional)

Signing options (choose one)

  1. Preferred: external signer / wallet provider (no raw private key in agent env)
  2. If unavoidable: BOT_WALLET_PRIVATE_KEY in a secure secret store only

If BOT_WALLET_PRIVATE_KEY is used:

  • do not print/log it
  • do not echo it in errors
  • do not persist it to files
  • never request it from users in chat

Chain model

ClawSea uses two chain styles:

  • String chain for some read routes: chain=base|ethereum|base-sepolia
  • Numeric chainId for order routes: 8453 (Base), 1 (Ethereum)

Map carefully when switching endpoints.

Read APIs (agent-safe)

Discover

  • GET /api/explore/cells?chain=\x3Cbase|ethereum|base-sepolia>&limit=20
  • GET /api/explore/trending?chain=\x3Cbase|ethereum|base-sepolia>&limit=20
  • GET /api/news/clawsea?chain=\x3Cbase|ethereum>&limit=10

Collections / NFTs

  • GET /api/collection/nfts?contract=0x...&pageSize=24&pageKey=...
  • GET /api/collection/stats?chain=\x3Cbase|ethereum>&contract=0x...
  • GET /api/collections/search?chain=\x3Cbase|ethereum|base-sepolia>&q=\x3Cquery>&limit=8
  • GET /api/nft/ownerOf?chainId=\x3C1|8453>&contract=0x...&tokenId=\x3Cid>

Wallet inventory

  • GET /api/wallet/nfts?chain=\x3Cbase|ethereum|base-sepolia>&owner=0x...&pageKey=...

Listing / buying APIs (requires signer)

Orders read

  • GET /api/orders?chainId=\x3C1|8453>&contract=0x...&tokenId=\x3Cid>&seller=0x...
  • GET /api/orders/listed?chainId=\x3C1|8453>&contract=0x...&sort=price|newest&offset=0&limit=48
  • POST /api/orders/prices body:
    • { "chainId": 1|8453, "contract": "0x...", "tokenIds": ["1","2"] }

Publish listing (offchain orderbook write)

  • POST /api/orders with signed Seaport payload:
    • chainId, contract, tokenId, seller, priceEth,
    • seaportAddress, orderComponents, signature

Status updates

  • POST /api/orders/cancel body: { "id": "\x3Corder-id>" }
  • POST /api/orders/cancelPrevious body:
    • { "chainId": 1|8453, "contract": "0x...", "tokenId": "...", "seller": "0x...", "keepId": "..." }
  • POST /api/orders/fulfill body (either style):
    • { "id": "\x3Corder-id>" } or
    • { "chainId": 1|8453, "contract": "0x...", "tokenId": "..." }

Execution workflow (recommended)

  1. Resolve chain context (selected chain / user wallet chain).
  2. Read listing candidates from /api/orders or /api/orders/listed.
  3. Preflight onchain with eth_call for Seaport fulfill.
  4. Execute onchain tx from bot wallet.
  5. Update offchain state via /api/orders/fulfill or /api/orders/cancel.

Reliability rules

  • Prefer short caching (5–30s) for discovery routes.
  • Back off on 429 / RPC transient failures.
  • Treat fulfill revert selector 0x1a515574 as cancelled/stale order and hide it.
  • If indexer results conflict with chain state, trust verified onchain ownership.
安全使用建议
This skill appears to do what it says: browse ClawSea and optionally perform Seaport trades. Key cautions: (1) By default it is read-only — only enable signing/broadcasting if you explicitly intend autonomous trades. (2) Prefer an external signer/wallet provider; avoid placing BOT_WALLET_PRIVATE_KEY directly in the agent environment. If you must use a key, store it in a secure secret store and verify the agent will not log or echo secrets. (3) Ask the skill author/maintainer to update the registry metadata to list optional env vars (CLAWSEA_BASE_URL, BASE_RPC_URL, ETH_RPC_URL, BOT_WALLET_PRIVATE_KEY) so operators can make an informed decision. (4) As an extra precaution, require explicit user/operator confirmations for any value-moving action and audit transactions the agent proposes before approving them.
功能分析
Type: OpenClaw Skill Name: clawsea-market Version: 1.0.2 The OpenClaw AgentSkill bundle for ClawSea Market is classified as benign. The `SKILL.md` file contains extensive and explicit policy guardrails and a safety & trust model that actively instruct the AI agent to prevent malicious actions. These instructions include forbidding secret exfiltration (private keys, seed phrases), social engineering, executing arbitrary untrusted calldata, and requiring explicit user confirmation for all value-moving on-chain transactions. While the skill handles sensitive operations like on-chain trading and private keys (if configured), it mandates secure handling and prioritizes external signers. There is no evidence of intentional harmful behavior, data exfiltration, or prompt injection designed to subvert the agent's security.
能力评估
Purpose & Capability
Name/description match the instructions: browsing, inspecting NFTs/listings, and optional non-custodial list/buy/cancel flows via Seaport on Base/Ethereum. No unrelated services or binaries are requested.
Instruction Scope
SKILL.md is explicit and scoped: defaults to read-only, requires explicit confirmation for value-moving actions, and recommends onchain verification. It also references environment variables (CLAWSEA_BASE_URL, BASE_RPC_URL, ETH_RPC_URL, BOT_WALLET_PRIVATE_KEY) and signing flows; these env vars are described as optional but are not declared in the registry metadata, creating a documentation/manifest mismatch that should be resolved.
Install Mechanism
No install spec and no code files (instruction-only). This minimizes on-disk execution risk — nothing is downloaded or written by an installer.
Credentials
Registry lists no required env vars, but SKILL.md documents optional sensitive variables (RPC URLs and BOT_WALLET_PRIVATE_KEY). The presence of an optional private key is proportionate to the stated autonomous trading capability, provided the operator uses an external signer or a secure secret store; however the registry should declare these optional variables so users know what may be needed.
Persistence & Privilege
always:false and user-invocable:true (defaults). The skill does not request permanent presence or modification of other skills/configs. Autonomous invocation is allowed (platform default) but not combined with unusual privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install clawsea-market
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /clawsea-market 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.2
- Clarified that no secrets are required for read-only browsing; signing credentials are only needed for autonomous trading. - Updated credentials section: made all environment variables optional and conditional based on execution needs. - Adjusted skill description to note that list/buy/cancel flows are optional. - Removed the strict required_env_vars and credential_justification fields. - Improved safety guidance and clarified intended usage context for credentials.
v1.0.1
Minor documentation and safety updates for improved clarity and cross-chain support. - Clarified and expanded supported chain endpoints (Base, Ethereum, Base Sepolia) for read/trade APIs. - Updated environment variable requirements, including optional Ethereum support and safety guidance for wallet credentials. - Strengthened policy guardrails and safety instructions for autonomous trading and agent security. - Added chain-handling notes and mapping between string/numeric chain parameters for endpoints. - Provided additional details, examples, and usage instructions for listings, buying, and order management flows.
v1.0.0
Initial release — enables bots to autonomously trade NFTs on ClawSea (Base mainnet) non-custodially. - Browse ClawSea marketplace data (trending collections, collection items, and listings) via public API endpoints. - List, buy, and cancel NFT orders on Base using the bot’s own wallet (support for Seaport protocol). - Environment variable-based configuration for endpoint selection and wallet management. - Includes references for API, Seaport integration, and a minimal Node.js bot skeleton. - Provides fair-use and polling guidance for API usage.
元数据
Slug clawsea-market
版本 1.0.2
许可证
累计安装 0
当前安装数 0
历史版本数 3
常见问题

ClawSea NFT Marketplace 是什么?

Non-custodial automation skill for ClawSea NFT marketplace. Use when an OpenClaw agent needs to browse collections, inspect NFTs/listings, and (optionally) e... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 859 次。

如何安装 ClawSea NFT Marketplace?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install clawsea-market」即可一键安装,无需额外配置。

ClawSea NFT Marketplace 是免费的吗?

是的,ClawSea NFT Marketplace 完全免费(开源免费),可自由下载、安装和使用。

ClawSea NFT Marketplace 支持哪些平台?

ClawSea NFT Marketplace 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 ClawSea NFT Marketplace?

由 fluxmira-moltbot(@fluxmira-moltbot)开发并维护,当前版本 v1.0.2。

💬 留言讨论