Skills/ClawHub/opensea-marketplace

opensea-marketplace@2.28.0

VERIFIED· install only

Publisher claims: "Query NFT and token data, trade NFTs on Seaport, swap ERC20 tokens via DEX aggregator, configure wallet signing providers, and build/register/gate AI agent tools on Base. Covers the full OpenSea developer surface across CLI, MCP server, shell scripts, and SDK. Pick the right sub-skill using the routing table below, then read that sub-skill's SKILL.md for operational detail." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher opensea · publishing for 40 daysInstalls 4,607Last detonated 8d ago
$clawhub install opensea-marketplace
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-07 and scored it 89/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

MEDIUM
npx invocation of non-well-known packageopensea-tool-sdk/SKILL.md:259 · npx invocation of non-well-known package — may execute untrusted codenpx @opensea/tool-sdk register \Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
LOW
Collapsed <details> block carrying instructionsopensea-wallet/references/wallet-setup.md:90 · Collapsed <details> block carrying instructions · informational: not an instruction file · informational: not an instruction file<summary>Fallback: verify via curl</summary> ```bash curl -s "https://api.privy.io/v1/wallets/$PRIVY_WALLET_ID" \ -H "Authorization: Basic $(printf "%s:%s" "$PRFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
MEDIUM
npx invocation of non-well-known packageopensea-tool-sdk/SKILL.md:270 · npx invocation of non-well-known package — may execute untrusted codenpx @opensea/tool-sdk register --metadata ... --network base --dry-runFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageopensea-tool-sdk/SKILL.md:264 · npx invocation of non-well-known package — may execute untrusted codenpx @opensea/tool-sdk register \Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageopensea-tool-sdk/SKILL.md:166 · npx invocation of non-well-known package — may execute untrusted codenpx @opensea/tool-sdk init --runtime vercel # or: cloudflare, expressFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File permission modification commandopensea-api/scripts/auth/opensea-resolve-key.sh:85 · File permission modification command — agent changes file ownership/permissionschmod 600 "$key_file" 2>/dev/null || trueFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
npx invocation of non-well-known packageopensea-tool-sdk/SKILL.md:459 · npx invocation of non-well-known package — may execute untrusted codenpx @opensea/tool-sdk init --runtime vercelFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageopensea-api/SKILL.md:501 · npx invocation of non-well-known package — may execute untrusted codenpx @opensea/cli collections get mfersFix: Pin versions and sources; vendor anything fetched at install time.
AST06
CRITICAL
False input termination markeropensea-api/SKILL.md:877 · False input termination marker — attempts to end user input section--- END OPENSEA API RESPONSE ---Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
MEDIUM
npx invocation of non-well-known packageopensea-api/SKILL.md:152 · npx invocation of non-well-known package — may execute untrusted code> **Recommended:** Use the `opensea` CLI (`@opensea/cli`) as your primary tool. Install with `npm install -g @opensea/cli` or use `npx @opensea/cli`. The shell scripts in `scripts/` remain available aFix: Pin versions and sources; vendor anything fetched at install time.
AST06

Cost to the agent

Instructions loaded
≈25,528 tok
7 files · 97 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.