Skills

Aavegotchi Baazaar

View, add, and execute Aavegotchi Baazaar listings on Base mainnet (8453).

Install

npx skills add LeoYeAI/agent-master-skills --skill aavegotchi-baazaar -g -a claude-code -y
Category
Engineering
Updated
4d ago
License
MIT
Context cost
Mediumabout 3,000 tokens
Runs scripts
No, instructions only

What it does

View, add, and execute Aavegotchi Baazaar listings on Base mainnet (8453). Buy with GHST directly or buy with USDC using swapAndBuy*. Safety-first: dryRun defaults true (simulate with cast call; only broadcast with cast send when dryRun=false / DRY_RUN=0).

Safety Rules

  • Default to dryRun=true (DRY_RUN=1). Never broadcast unless explicitly instructed to do so.
  • Mandatory confirmation gate for every cast send:
    • First simulate with cast call and show a transaction summary (method, args, chain id, from, rpc URL).
    • Then require an explicit user confirmation message before broadcast.
    • Only allow broadcast when DRY_RUN=0 and BROADCAST_CONFIRM=CONFIRM_SEND are both set.
    • If any transaction argument changes after confirmation, invalidate confirmation and require a new confirmation.
  • Always verify Base mainnet:
    • ~/.foundry/bin/cast chain-id --rpc-url "${BASE_MAINNET_RPC:-https://mainnet.base.org}" must be 8453.
  • Always verify key/address alignment:
    • ~/.foundry/bin/cast wallet address --private-key "$PRIVATE_KEY" must equal $FROM_ADDRESS.
  • Always refetch the listing from the subgraph immediately before simulating or broadcasting (listings can be cancelled/sold/price-updated).
  • Never print or log $PRIVATE_KEY.
  • Never accept a private key from user chat input; only read $PRIVATE_KEY from environment.

Shell Input Safety (Avoid RCE)

This skill includes shell commands. Treat any value you copy from a user or an external source (subgraph responses, chat messages, etc.) as untrusted.

Read the whole SKILL.md on GitHub

More in Engineering