← 返回 Skills 市场
harleyscodes

Hedera Token Minting

作者 HarleysCodes · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
559
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install hedera-token-mint
功能描述
Create and manage fungible tokens and NFTs on Hedera with minting, supply control, and permission configuration.
使用说明 (SKILL.md)

Hedera Token Minting (HTS)

Setup

npm install @hashgraph/sdk

Create Fungible Token

import { 
  TokenCreateTransaction, 
  TokenSupplyType,
  TokenType 
} from '@hashgraph/sdk';

const tx = await new TokenCreateTransaction()
  .setTokenName("My Token")
  .setTokenSymbol("MTK")
  .setTokenType(TokenType.FungibleCommon)
  .setSupplyType(TokenSupplyType.Infinite)
  .setDecimals(2)
  .setInitialSupply(1000000) // Total supply = 1,000,000
  .setTreasuryAccountId(treasuryId)
  .setAdminKey(adminKey)
  .setSupplyKey(supplyKey)
  .freezeWith(client)
  .sign(treasuryKey);

const result = await tx.execute(client);
const tokenId = result.receipt.tokenId;

Create NFT Collection

const tx = await new TokenCreateTransaction()
  .setTokenName("My NFT Collection")
  .setTokenSymbol("MNFT")
  .setTokenType(TokenType.NonFungibleUnique)
  .setTreasuryAccountId(treasuryId)
  .setAdminKey(adminKey)
  .setSupplyKey(supplyKey)
  .freezeWith(client)
  .sign(treasuryKey);

Mint NFTs

import { TokenMintTransaction } from '@hashgraph/sdk';

const tx = await new TokenMintTransaction()
  .setTokenId(tokenId)
  .addMetadata(Buffer.from("NFT #1 metadata"))
  .addMetadata(Buffer.from("NFT #2 metadata"))
  .freezeWith(client)
  .sign(supplyKey);

const result = await tx.execute(client);

Token Operations

Transfer Token

import { TransferTransaction } from '@hashgraph/sdk';

await new TransferTransaction()
  .addTokenTransfer(tokenId, fromAccount, -10)
  .addTokenTransfer(tokenId, toAccount, 10)
  .execute(client);

Burn Tokens

import { TokenBurnTransaction } from '@hashgraph/sdk';

await new TokenBurnTransaction()
  .setTokenId(tokenId)
  .setAmount(100)
  .execute(client);

Key Points

  • Supply Types: Infinite or Finite
  • Token Types: FungibleCommon or NonFungibleUnique
  • Royalty: Use custom fees for NFT royalties
  • Token ID Format: 0.0.12345
安全使用建议
This skill appears to be a simple recipe for using the Hedera JavaScript/TypeScript SDK to create and manage tokens, which is coherent. However, the SKILL.md omits how to initialize the Hedera client or where private keys (treasuryKey, supplyKey, adminKey) should come from. Before installing or using the skill: - Never paste real mainnet private keys into a tool or skill you don't fully trust. Prefer testnet keys for trial runs. - Ask the publisher (or update the skill) to declare explicit environment variables or a secure key-loading procedure (e.g., use a secrets manager, environment variables with clear names, or hardware keys). - Confirm whether the agent will prompt for keys or try to read them from files or environment variables. If it prompts, prefer to supply ephemeral/test keys or perform operations manually. - Audit the @hashgraph/sdk version you install and pin a known-good version; run npm audit and review release notes for security issues. - If you need higher assurance, request the skill include a secure example of client initialization (showing network selection, operator configuration, and explicit env var names) and clear instructions for safe key management. I rated this 'suspicious' (medium confidence) because the core functionality matches the description but the omission of credential handling is a notable inconsistency. Providing declared env vars or a secure key-handling workflow would increase confidence.
功能分析
Type: OpenClaw Skill Name: hedera-token-mint Version: 1.0.0 The skill bundle provides documentation and code examples for interacting with the Hedera Token Service using the official `@hashgraph/sdk`. The `SKILL.md` file contains standard setup instructions (`npm install`) and illustrative TypeScript code snippets for creating, minting, transferring, and burning Hedera tokens. There is no evidence of malicious intent, such as data exfiltration, unauthorized execution, persistence mechanisms, or prompt injection attempts against the AI agent. All content aligns with the stated purpose of managing Hedera tokens.
能力评估
Purpose & Capability
The skill's name and examples (using @hashgraph/sdk to create/mint/transfer/burn tokens) align with its stated purpose. Requiring the Hashgraph SDK is reasonable for Hedera token operations. However, the examples assume the presence of a Hedera client and private keys (treasuryKey, supplyKey, adminKey) without documenting how those credentials are supplied or secured.
Instruction Scope
SKILL.md gives concrete code for token operations and suggests `npm install @hashgraph/sdk`. It does not instruct the agent to read unrelated system files, but it references variables (client, treasuryId, supplyKey, treasuryKey, etc.) that imply access to sensitive credentials. There is no guidance on initializing the client, target network (testnet/mainnet), or secure key handling — leaving broad discretion about where keys come from.
Install Mechanism
This is an instruction-only skill with no install spec. The doc tells users to run `npm install @hashgraph/sdk`, which is a standard npm package install (traceable to the npm registry). That is expected for TypeScript examples but does carry the usual npm supply-chain considerations; no suspicious download URLs or archives are present in the skill itself.
Credentials
The runtime examples clearly require private keys and a configured Hedera client, but the skill declares no required environment variables, primary credential, or config paths. This mismatch is meaningful: the skill needs sensitive credentials to function but does not declare or constrain how they're provided, increasing risk of accidental key exposure or ad-hoc prompts for secrets.
Persistence & Privilege
The skill does not request persistent platform privileges (always is false), nor does it declare any config-path or cross-skill modification. It appears to rely on the agent executing user-supplied code snippets at runtime; no elevated platform presence is requested.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install hedera-token-mint
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /hedera-token-mint 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
- Initial release of hedera-token-mint (v1.0.0). - Enables minting of fungible tokens and creation of NFT collections on Hedera HTS. - Supports setting up token supply types, decimals, and permissions (admin/supply keys). - Includes methods for minting NFTs, transferring tokens, and burning tokens. - Documentation covers usage examples and key concepts like token types and royalties.
元数据
Slug hedera-token-mint
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Hedera Token Minting 是什么?

Create and manage fungible tokens and NFTs on Hedera with minting, supply control, and permission configuration. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 559 次。

如何安装 Hedera Token Minting?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install hedera-token-mint」即可一键安装,无需额外配置。

Hedera Token Minting 是免费的吗?

是的,Hedera Token Minting 完全免费(开源免费),可自由下载、安装和使用。

Hedera Token Minting 支持哪些平台?

Hedera Token Minting 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Hedera Token Minting?

由 HarleysCodes(@harleyscodes)开发并维护,当前版本 v1.0.0。

💬 留言讨论