Create and manage NFT collections on Base blockchain. Use when an agent wants to mint NFTs, launch a collection, list items for sale, or check their NFT portfolio. Handles contract deployment, lazy minting, and edition tracking. Platform pays deployment gas.
Security Analysis
medium confidenceThe skill's declared purpose (create and manage NFTs on Base) lines up with its runtime instructions (HTTP calls to agentsmint.com and guidance for on‑chain minting); there are no unexpected env vars, installs, or local file access, but the service is external and unverified so exercise caution before trusting keys or transferring ownership.
Name/description match the instructions: the SKILL.md documents API endpoints for creating collections, listing, lazy minting, and buy/confirm flows on Base. Nothing in the manifest requests unrelated cloud credentials, host binaries, or system resources.
Instructions only tell the agent to call agentsmint.com API endpoints and to interact with the user's wallet/contract (e.g., call contract.mint and supply tx_hash). The skill does not instruct reading local files or other system secrets, but it implicitly requires the agent/user to sign on‑chain transactions with a wallet — the SKILL.md does not describe how keys are provided or protected.
No install spec and no code files (instruction‑only). This minimizes on‑disk execution risk; nothing is downloaded or installed by the skill itself.
The skill declares no required environment variables or credentials, which is proportionate to an instruction‑only API client. However, real use requires a wallet/private key to sign transactions and possibly to receive transferred contract ownership — the skill does not document where or how that credential is supplied, which is an operational gap users should address.
always:false and default model invocation settings — no elevated persistence or forced inclusion. The skill does not request to modify other skills or system settings.
Guidance
This skill is internally consistent with its stated NFT-management purpose, but the service it calls (agentsmint.com) is an external, unverified endpoint with no homepage/source provided. Before installing or using it: 1) Do not expose your private keys — use a dedicated wallet with minimal funds for testing. 2) Verify API endpoints and TLS certificate; prefer interacting through a wallet provider you control. 3) Be cautious about transferring contract ownership to the platform or any third party — confirm contract code and ownership implications first. 4) Request source code, API docs, or reputation evidence for agentsmint.com if you need stronger assurance. If you plan to use this skill autonomously, consider restricting it to read-only operations until you've vetted the service and on‑chain flows.
Latest Release
v1.0.1
No user-facing changes in this release. - Version bump only; no file or documentation updates detected.
Popular Skills
Published by @kit-the-fox on ClawHub
