Zora NFT Pro

Generates a Nano Banana style NFT and deploys it to the Zora Network.

This skill needs a real wallet private key to sign and send transactions — exposing a private key to any third-party skill is high risk. Before installing: 1) Verify the publisher and source (homepage is missing and metadata owner is opaque). 2) Do not provide a funded mainnet private key; use a throwaway/test wallet or an account with very limited funds and permissions. 3) Inspect and complete the code yourself — the script contains placeholders for IPFS upload and contract bytecode; it is not a finished deployer. 4) Prefer workflows that require external signing (hardware wallet or separate signing service) rather than storing PRIVATE_KEY in environment variables. 5) If you must test: run in an isolated environment, on testnet, and monitor outgoing network requests. 6) Ask the author for an install spec and for proof of the exact contracts/bytecode used and for safe signing patterns before trusting real assets.

Type: OpenClaw Skill Name: skill-zorapro Version: 1.0.0 The skill is classified as suspicious due to its direct handling of a highly sensitive `PRIVATE_KEY` as an environment variable in `SKILL.md` and `scriptsmain.py`. While this is required for the stated purpose of deploying NFTs, it represents a significant security risk, making the skill vulnerable to compromise if the execution environment is not perfectly secured. There is no explicit evidence of malicious intent such as data exfiltration to unauthorized endpoints, backdoors, or prompt injection attempts against the agent, but the direct exposure and use of a private key constitutes a high-risk operational practice.