SKILLEMALL.ai

DF element-nft-trader

Use when the user wants to sell or buy an NFT on Element, create or accept a bid or offer, query public collection orders or account orders, cancel an Element order, get the configured trading wallet address, or use a supported custom payment token on a supported Element EVM network. Supported custom payment tokens are BSC USDT/USD1, Base USDC, and Polygon ETH. Other chains should use native or wrapped native token flow.

Not recommendedlow grade D
ClawHub Agent Skills author: element-som v1.0.5 MIT-0 75 files body ≈ 5 152 tokens Open the sourceclawhub.ai analyzed 2 d ago

As a process F 58/100 · Will not run — References files that are not bundled: [EXPLORER_URL]/tx/[TX_HASH]

GeneratorInfrastructuretype and topics are labelled automatically from the skill text
JSON
Technical rating
D
57/100
safety, quality, tests
Safety 60%
46
Quality 40%
73
Run on models
none yet
Process rating
F
58/100
Will not run
References files that are not bundled: [EXPLORER_URL]/tx/[TX_HASH]
Tools and files w 18
0
Progress reporting w 2
0
Running it twice w 4
30
the three weakest of ten parameters · all ten

How to improve

  1. The SKILL.md body is over 5,000 tokens: move reference detail into references/ and load it when needed.
  2. The text references files that are not there: add them or drop the references.
For the model run — optional
  • Your own cases (evals/evals.json, 4–6 real requests with expected answers): the full check would then run those instead of a model-drafted suite.
  • A spec.yaml with trigger phrases and assertions — a behaviour contract for CI; `skilltest init` writes a template.

Guard findings · 54

✓ No critical or high findings

Medium and low: 54
  • low Secrets in code secret-high-entropy-token references/payment-tokens.md:32
    High-entropy token-like string (may be an id, hash or a credential) (documentation table row)
    | `bsc` | `USD1` | `0x8d…B0d` | `18` | Supported | Supported on BSC as a custom ERC20 payment token |
    table
  • low Secrets in code secret-high-entropy-token references/payment-tokens.md:33
    High-entropy token-like string (may be an id, hash or a credential) (documentation table row)
    | `bsc` | `USDT` | `0x55…955` | `18` | Supported | Supported on BSC as a custom ERC20 payment token |
    table
  • low Secrets in code secret-high-entropy-token references/payment-tokens.md:34
    High-entropy token-like string (may be an id, hash or a credential) (documentation table row)
    | `base` | `USDC` | `0x83…913` | `6` | Supported | Supported on Base as a custom ERC20 payment token |
    table
  • low Secrets in code secret-high-entropy-token scripts/code/index.ts:29
    High-entropy token-like string (may be an id, hash or a credential)
    Make…nse,
  • low Secrets in code secret-high-entropy-token scripts/code/src/api/openApi.ts:14
    High-entropy token-like string (may be an id, hash or a credential)
    import { Batc…est } from "../element/batchSignedOrder/batchSignedTypes";
  • low Secrets in code secret-high-entropy-token scripts/code/src/api/openApi.ts:50
    High-entropy token-like string (may be an id, hash or a credential)
    export async function post…der(
  • low Secrets in code secret-high-entropy-token scripts/code/src/api/openApi.ts:51
    High-entropy token-like string (may be an id, hash or a credential)
    order: Batc…est,
  • low Secrets in code secret-high-entropy-token scripts/code/src/api/openApi.ts:69
    High-entropy token-like string (may be an id, hash or a credential)
    return post…der(order, option, retries - 1);
  • low Secrets in code secret-high-entropy-token scripts/code/src/contracts/abi/elementEx/IAggTraderHelper.json:3252
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    "name": "isER…led",
    quoted
  • low Secrets in code secret-high-entropy-token scripts/code/src/contracts/abi/elementEx/IAggTraderHelper.json:3634
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    "name": "vali…ure",
    quoted
  • low Secrets in code secret-high-entropy-token scripts/code/src/contracts/abi/elementEx/IAggTraderHelper.json:3749
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    "name": "vali…ure",
    quoted
  • low Secrets in code secret-high-entropy-token scripts/code/src/contracts/abi/elementEx/IAggTraderHelper.json:3876
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    "name": "vali…ure",
    quoted
  • low Secrets in code secret-high-entropy-token scripts/code/src/contracts/abi/elementEx/IAggTraderHelper.json:3986
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    "name": "vali…ure",
    quoted
  • low Secrets in code secret-high-entropy-token scripts/code/src/contracts/abi/elementEx/IElementEx.json:2145
    High-entropy token-like string (may be an id, hash or a credential) (detector / deny-list definition)
    "name": "batc…ers",
    detector
  • low Secrets in code secret-high-entropy-token scripts/code/src/contracts/abi/elementEx/IElementEx.json:3247
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    "name": "getE…tor",
    quoted
  • low Secrets in code secret-high-entropy-token scripts/code/src/contracts/abi/elementEx/IElementEx.json:3669
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    "name": "getE…tor",
    quoted
  • low Secrets in code secret-high-entropy-token scripts/code/src/contracts/abi/elementEx/IElementEx.json:5799
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    "name": "vali…ure",
    quoted
  • low Secrets in code secret-high-entropy-token scripts/code/src/contracts/abi/elementEx/IElementEx.json:5908
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    "name": "vali…ure",
    quoted
  • low Secrets in code secret-high-entropy-token scripts/code/src/contracts/config.ts:6
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    ElementEx: '0x20…7c4',
    quoted
  • low Secrets in code secret-high-entropy-token scripts/code/src/contracts/config.ts:7
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    Elem…V2: '0xb4…00c',
    quoted
  • low Secrets in code secret-high-entropy-token scripts/code/src/contracts/config.ts:8
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    Helper: '0x68…1Df',
    quoted
  • low Secrets in code secret-high-entropy-token scripts/code/src/contracts/config.ts:9
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    WToken: '0xC0…Cc2'
    quoted
  • low Secrets in code secret-high-entropy-token scripts/code/src/contracts/config.ts:18
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    ElementEx: '0xb3…ae1',
    quoted
  • low Secrets in code secret-high-entropy-token scripts/code/src/element/batchSignedOrder/batchSignedOrderManager.ts:18
    High-entropy token-like string (may be an id, hash or a credential)
    import { Batc…der, Batc…est, Collection } from './batchSignedTypes'
  • low Secrets in code secret-high-entropy-token scripts/code/src/element/batchSignedOrder/batchSignedOrderManager.ts:123
    High-entropy token-like string (may be an id, hash or a credential)
    public async signOrder(order: Batc…der): Promise<Batc…est> {
  • low Secrets in code secret-high-entropy-token scripts/code/src/element/batchSignedOrder/batchSignedOrderManager.ts:126
    High-entropy token-like string (may be an id, hash or a credential)
    const o = order as Batc…est
  • low Secrets in code secret-high-entropy-token scripts/code/src/element/batchSignedOrder/batchSignedOrderManager.ts:164
    High-entropy token-like string (may be an id, hash or a credential)
    export function getSucceedList(order: Batc…est, assets: any[]): OrderInformation[] {
  • low Secrets in code secret-high-entropy-token scripts/code/src/element/batchSignedOrder/batchSignedTypes.ts:29
    High-entropy token-like string (may be an id, hash or a credential)
    export interface Batc…est extends Batc…der {
  • low Secrets in code secret-high-entropy-token scripts/code/src/element/batchSignedOrder/batchSignedTypes.ts:36
    High-entropy token-like string (may be an id, hash or a credential)
    export interface Batc…nse extends Batc…est {
  • low Secrets in code secret-high-entropy-token scripts/code/src/index.ts:3
    High-entropy token-like string (may be an id, hash or a credential)
    post…der,
  • low Secrets in code secret-high-entropy-token scripts/code/src/index.ts:30
    High-entropy token-like string (may be an id, hash or a credential)
    Make…nse,
  • low Secrets in code secret-high-entropy-token scripts/code/src/index.ts:92
    High-entropy token-like string (may be an id, hash or a credential)
    ): Promise<Make…nse> {
  • low Secrets in code secret-high-entropy-token scripts/code/src/index.ts:108
    High-entropy token-like string (may be an id, hash or a credential)
    const r = await post…der(
  • low Secrets in code secret-high-entropy-token scripts/code/src/types/types.ts:147
    High-entropy token-like string (may be an id, hash or a credential)
    export interface Make…nse {
  • low Secrets in code secret-high-entropy-token scripts/lib/code/src/api/openApi.js:7
    High-entropy token-like string (may be an id, hash or a credential)
    expo…der = post…der;
  • low Secrets in code secret-high-entropy-token scripts/lib/code/src/api/openApi.js:43
    High-entropy token-like string (may be an id, hash or a credential)
    async function post…der(order, option, retries = 1) {
  • low Secrets in code secret-high-entropy-token scripts/lib/code/src/api/openApi.js:59
    High-entropy token-like string (may be an id, hash or a credential)
    return post…der(order, option, retries - 1);
  • low Secrets in code secret-high-entropy-token scripts/lib/code/src/contracts/abi/elementEx/IAggTraderHelper.json:3252
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    "name": "isER…led",
    quoted
  • low Secrets in code secret-high-entropy-token scripts/lib/code/src/contracts/abi/elementEx/IAggTraderHelper.json:3634
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    "name": "vali…ure",
    quoted
  • low Secrets in code secret-high-entropy-token scripts/lib/code/src/contracts/abi/elementEx/IAggTraderHelper.json:3749
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    "name": "vali…ure",
    quoted
  • low Secrets in code secret-high-entropy-token scripts/lib/code/src/contracts/abi/elementEx/IAggTraderHelper.json:3876
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    "name": "vali…ure",
    quoted
  • low Secrets in code secret-high-entropy-token scripts/lib/code/src/contracts/abi/elementEx/IAggTraderHelper.json:3986
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    "name": "vali…ure",
    quoted
  • low Secrets in code secret-high-entropy-token scripts/lib/code/src/contracts/abi/elementEx/IElementEx.json:2145
    High-entropy token-like string (may be an id, hash or a credential) (detector / deny-list definition)
    "name": "batc…ers",
    detector
  • low Secrets in code secret-high-entropy-token scripts/lib/code/src/contracts/abi/elementEx/IElementEx.json:3247
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    "name": "getE…tor",
    quoted
  • low Secrets in code secret-high-entropy-token scripts/lib/code/src/contracts/abi/elementEx/IElementEx.json:3669
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    "name": "getE…tor",
    quoted
  • low Secrets in code secret-high-entropy-token scripts/lib/code/src/contracts/abi/elementEx/IElementEx.json:5799
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    "name": "vali…ure",
    quoted
  • low Secrets in code secret-high-entropy-token scripts/lib/code/src/contracts/abi/elementEx/IElementEx.json:5908
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    "name": "vali…ure",
    quoted
  • low Secrets in code secret-high-entropy-token scripts/lib/code/src/contracts/config.js:11
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    ElementEx: '0x20…7c4',
    quoted
  • low Secrets in code secret-high-entropy-token scripts/lib/code/src/contracts/config.js:12
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    Elem…V2: '0xb4…00c',
    quoted
  • low Secrets in code secret-high-entropy-token scripts/lib/code/src/contracts/config.js:13
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    Helper: '0x68…1Df',
    quoted
  • low Secrets in code secret-high-entropy-token scripts/lib/code/src/contracts/config.js:14
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    WToken: '0xC0…Cc2'
    quoted
  • low Secrets in code secret-high-entropy-token scripts/lib/code/src/contracts/config.js:23
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    ElementEx: '0xb3…ae1',
    quoted
  • low Secrets in code secret-high-entropy-token SKILL.md:218
    High-entropy token-like string (may be an id, hash or a credential)
    User: Query order 0xCA…0D9
  • low Secrets in code secret-high-entropy-token SKILL.md:221
    High-entropy token-like string (may be an id, hash or a credential) (quoted — discussed, not commanded)
    Assistant: Is `0xCA…0D9` the NFT collection contract address for the query?
    quoted

Files scanned: 75. Evidence is masked. Grey chips explain why severity was lowered.

Against the Agent Skills spec

  • warning body-long SKILL.md body ≈ 5152 tokens (recommended < 5000); move details to references/
  • warning missing-ref reference to a missing file: [EXPLORER_URL]/tx/[TX_HASH]
  • note frontmatter-key unknown frontmatter key "envs"
  • note frontmatter-key unknown frontmatter key "requires"

Process rating: all ten parameters 58/100

Will not run. References files that are not bundled: [EXPLORER_URL]/tx/[TX_HASH]
  • 0Tools and files. 1 referenced file(s) missing: [EXPLORER_URL]/tx/[TX_HASH]
  • 0Progress reporting. Says nothing while it works
  • 30Running it twice. 5 mutating operations with no state check
  • 40Result and completion. Does not say what the result is
  • 70When it triggers. States when to use, but not when not to
  • 70Inputs and preconditions. Inputs and preconditions are listed
  • 70Execution cost. Instruction body is 5152 tokens
  • 85Steps. 138 steps, 1 vague phrases
  • 100Failures and branches. 14 branches, has a failure section
  • 100Consistency. Name and required fields are in place
  • medium Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
  • low 16 top-level sections: this looks like several domains in one skill

Everything here is measured from the skill text rather than judged by a model, so the numbers are checkable. A parameter weighs more when it is a more common reason for the process to stall.

Quality signals

  • +5Description has no quoted example phrases that should trigger the skill
  • +4Description does not say when NOT to use the skill (false activations)
  • +3Output format is not stated: the model decides each time
  • +1No license
  • +2Single-language instructions
  • +3Description length 424: enough signal without eating the budget
  • +4Structure: 35 headings
  • +3Step-by-step instructions: 138 items
  • +4Has examples (4 code blocks)
  • +4Reference files are cited in the instructions (9 of 9)
  • +3All 1 scripts are documented

Quality base 70; lint remarks subtract, signals add up to 100. Result: 73.

External checks

ClawHub: suspicious
This looks like a real Element NFT trading skill, but it can automatically grant broad token approvals from a private-key wallet, so it needs careful review before use.
LLM: suspicious (high) · VirusTotal: · 29 May 2026