clanker-plugin

Tool for deploying and managing ERC-20 tokens, the common standard for fungible tokens on Ethereum-compatible blockchains, through Clanker on Base and Arbitrum.

In plain words
What is it for?
Use it to deploy tokens, search or list Clanker tokens, and claim liquidity-pool rewards or Clanker fees.
Why use it?
It gathers token-launch and post-launch actions in one place instead of requiring separate protocol interactions.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/okx/plugin-store/clanker-plugin
Any agent
npx skills add okx/plugin-store --skill clanker-plugin
Clone the repo
git clone --depth 1 https://github.com/okx/plugin-store

Made for: Claude Code, Codex.

Per session 55 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 6,987 The whole file, excluding the scripts and references it only reads on demand.
Security scan C 2 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00055 $0.06987
Opus 5 $0.00028 $0.03494
Sonnet 5 $0.00011 $0.01397
Haiku 4.5 $0.00006 $0.00699

Measured 2d ago against content hash 78ddf1b023e4, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade C, and why

clanker-plugin scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Recursive force deletehighDestructive command

rm -rf with a variable or a broad path is one typo away from removing the wrong tree.

rm -rf "$ONCHAINOS_TMP"

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

REMOTE_VER=$(curl -sf --max-time 3 "https://raw.githubusercontent.com/okx/plugin-store/main/skills/clanker-plugin/plugin.yaml" | grep '^version' | head -1 | tr -d '"' | awk '{print $2}')
skills/clanker-plugin/SKILL.md · 622 lines

How it starts

The opening of the file, as written. The whole thing — 622 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Pre-flight Dependencies (auto-injected by Plugin Store CI)

Run once per session before first use. These checks ensure required tools are installed.

Version check (auto-injected)

AI Agent Instruction: Run this version check before executing any commands from this skill. The check is a read-only fetch from raw.githubusercontent.com — it does not install anything. If it reports Update available, you MUST stop, surface the message to the user verbatim, and obtain explicit confirmation before running the suggested npx skills add … command. Do not run the update silently. After a confirmed update completes, re-read this SKILL.md before proceeding.

# Check for skill updates (1-hour cache).
# Network scope: this block calls raw.githubusercontent.com for the version probe only.
# It does NOT install anything; install requires user-confirmed `npx skills add` below.
UPDATE_CACHE="$HOME/.plugin-store/update-cache/clanker-plugin"
CACHE_MAX=3600
LOCAL_VER="0.2.6"
DO_CHECK=true

if [ -f "$UPDATE_CACHE" ]; then
  CACHE_MOD=$(stat -f %m "$UPDATE_CACHE" 2>/dev/null || stat -c %Y "$UPDATE_CACHE" 2>/dev/null || echo 0)
  NOW=$(date +%s)
  AGE=$(( NOW - CACHE_MOD ))
  [ "$AGE" -lt "$CACHE_MAX" ] && DO_CHECK=false
fi

if [ "$DO_CHECK" = true ]; then
  REMOTE_VER=$(curl -sf --max-time 3 "https://raw.githubusercontent.com/okx/plugin-store/main/skills/clanker-plugin/plugin.yaml" | grep '^version' | head -1 | tr -d '"' | awk '{print $2}')
  if [ -n "$REMOTE_VER" ]; then
    mkdir -p "$HOME/.plugin-store/update-cache"
    echo "$REMOTE_VER" > "$UPDATE_CACHE"
  fi
fi

REMOTE_VER=$(cat "$UPDATE_CACHE" 2>/dev/null || echo "$LOCAL_VER")
if [ "$REMOTE_VER" != "$LOCAL_VER" ]; then
  echo "Update available: clanker-plugin v$LOCAL_VER -> v$REMOTE_VER."
  echo "ACTION REQUIRED: ask the user to confirm before running:"
  echo "  npx skills add okx/plugin-store --skill clanker-plugin --global"
  echo "(This contacts the npm registry and github.com/okx/plugin-store and overwrites this skill. Do NOT auto-run.)"
fi

Read the full file on GitHub · 622 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 622 lines · 55 tokens per session scan C 78ddf1b023e4

Subscribe to this mod's changes

clanker-plugin is a skill published in the GitHub repository okx/plugin-store (11 stars, last pushed 29d ago), licensed MIT. It adds 55 tokens to every session and 6,987 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it C with 2 findings (recursive force delete, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

morse-launch-b20

Launch a B20 token on Base by calling the B20 Factory precompile directly through Capminal — encodes createB20 params/initCalls, then creates, mints, and verifies the token using your CAP API key.

Capminal/agent-skills · 52 tokens

contract-interaction

Generic smart-contract interaction for Capminal — read (call), batch-read (multicall) and write (send tx) ANY contract on Base or Robinhood chain by passing a flexible ABI, contract address, function name and parameters, using your CAP API key.

Capminal/agent-skills · 58 tokens

SunPump Meme Token Toolkit

Create meme tokens on SunPump (sun sunpump launch), trade them — both pre-launch (bonding curve via sun sunpump buy/sell) and post-launch (SunSwap via sun swap) — and query token info, rankings, holders, portfolios, and trade history.

BofAI/skills · 65 tokens

starkzap-sdk

Reference for integrating or maintaining applications built with keep-starknet-strange/starkzap, including StarkSDK setup, onboarding, wallet lifecycle, sponsored transactions, ERC20 flows, staking, and transaction builder usage.

keep-starknet-strange/starknet-agentic · 47 tokens

bankr-shopify

Shopify Admin & Storefront GraphQL APIs via curl, with Bankr-native bridges. Manage products, orders, customers, inventory, metafields, webhooks, and bulk ops, then wire merchant data to onchain primitives — store a Bankr-resolvable handle (ENS, Twitter, Farcaster, wallet) on each customer as a metafield, expose…

BankrBot/skills · 163 tokens

tenjin-search

Durable + costly to reproduce, then search first. Otherwise just do the task. Answer it in a second; a habitual miss adds latency to every one.

BackTrackCo/tenjin-agent · 5 tokens