← Back to Skills Marketplace
vshamanov

Zerion Api

by vshamanov · GitHub ↗ · v0.1.0
cross-platform ⚠ suspicious
1376
Downloads
1
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install zerion-api-skill-2
Description
Query blockchain wallet data, token prices, and transaction history using the Zerion API via its MCP connector. Use this skill whenever the user asks about: crypto wallet balances, portfolio values, token holdings or positions, DeFi positions (staking, lending, LP), wallet PnL (profit and loss), transaction history, token/fungible asset prices or charts, NFT holdings or NFT portfolio value, or any web3 wallet analytics. Triggers on mentions of wallet addresses (0x...), ENS names, token names/symbols, "portfolio", "positions", "PnL", "transactions", "balance", "holdings", "NFTs", or any crypto/DeFi analytics queries. Also use when building artifacts or dashboards that display wallet or token data.
Usage Guidance
This skill appears to do what it claims (query Zerion API endpoints for wallet, token, and NFT data), but take precautions before using it: - Do not paste highly sensitive secrets (private keys, mnemonics) into chat — the skill only needs the Zerion API key. Prefer a read-only or limited-scope API key. - Avoid following the SKILL.md guidance to embed the API key directly into model prompts or inner prompts; that can leak the key to the model provider and logs. Instead, use a secure connector/secret store or have a backend proxy that injects the Authorization header server-side. - Confirm the MCP server URL and trustworthiness (authors mention https://developers.zerion.io/mcp). If unsure, contact Zerion or use their official docs to verify endpoints and authentication method. - Because the skill's source and homepage are missing, prefer using platform-provided secure secret handling (secret manager) or only test with a rotated, limited‑permission test key first. - Rotate and revoke the API key after testing, and monitor usage for unexpected requests. If you cannot provide the key via a secure backend/secret store and must paste it into chat, be aware the key may be exposed to models and logs; consider declining to install/use the skill until it supports secure secret handling.
Capability Analysis
Type: OpenClaw Skill Name: zerion-api-skill-2 Version: 0.1.0 The skill is designed to query blockchain data via the Zerion API, which is a legitimate purpose. The `SKILL.md` explicitly instructs the AI agent to handle the user-provided API key securely by storing it only in memory and forbidding it from being written to files, displayed in artifacts, or logged. All described API interactions are read-only operations with the legitimate Zerion API endpoints, and there are no indicators of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent.
Capability Assessment
Purpose & Capability
Name and description (Zerion wallet/portfolio/NFT analytics) align with the endpoints and workflows documented in the skill. It does not request unrelated binaries, platform credentials, or config paths; the operations described (portfolio, positions, transactions, PnL, charts, fungible/NFT endpoints) are consistent with the Zerion API purpose.
Instruction Scope
Most runtime instructions stay on‑task (call Zerion endpoints, request an API key from the user, do not write it to files). However, the SKILL.md repeatedly recommends including the API key in 'inner prompts' (pass the key into an inner Claude prompt or embed it in the artifact prompt so the MCP call can authenticate). Embedding secrets in model prompts is a high risk for secret leakage (models, logs, and any downstream systems may capture the key). The instructions also tell frontends to accept the key via input and pass it into prompts — this encourages client-side prompt injection of secrets rather than secure header usage. No instructions ask the agent to read unrelated files or environment variables, which is good.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk by an installer and no external packages are pulled in. This is the lowest-risk install footprint.
Credentials
The skill requires an API key for Zerion (which is appropriate). But it does not declare or require environment variables or platform secret storage; instead it instructs the user/agent to paste the key into chat and to include it inside prompts passed to inner models or artifacts. Asking for a per‑session API key is proportionate, but the recommended method of handling that key (embedding in prompts) is disproportionally risky and poorly justified. The skill does not request unrelated credentials.
Persistence & Privilege
The skill is not set to always:true and does not request persistent or cross-skill configuration changes. It explicitly says not to write the key to files and to store it only in memory for the conversation. The skill's source is unknown and homepage is missing — that reduces trust but does not, by itself, indicate excessive privilege.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install zerion-api-skill-2
  3. After installation, invoke the skill by name or use /zerion-api-skill-2
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release of zerion-api-skill-2. - Provides access to blockchain wallet data, token prices, NFTs, PnL, and transaction history via the Zerion API MCP connector. - Requires users to provide a Zerion API key for authentication each session (not stored or logged). - Supports EVM/ENS/Solana addresses, with chain/position filtering options. - Includes quick-reference workflows for common DeFi, portfolio, and analytics queries. - Guidance provided for secure API key handling and using MCP responses when building dashboards or artifacts. - Detailed endpoint and parameter documentation to streamline usage and integration.
Metadata
Slug zerion-api-skill-2
Version 0.1.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Zerion Api?

Query blockchain wallet data, token prices, and transaction history using the Zerion API via its MCP connector. Use this skill whenever the user asks about: crypto wallet balances, portfolio values, token holdings or positions, DeFi positions (staking, lending, LP), wallet PnL (profit and loss), transaction history, token/fungible asset prices or charts, NFT holdings or NFT portfolio value, or any web3 wallet analytics. Triggers on mentions of wallet addresses (0x...), ENS names, token names/symbols, "portfolio", "positions", "PnL", "transactions", "balance", "holdings", "NFTs", or any crypto/DeFi analytics queries. Also use when building artifacts or dashboards that display wallet or token data. It is an AI Agent Skill for Claude Code / OpenClaw, with 1376 downloads so far.

How do I install Zerion Api?

Run "/install zerion-api-skill-2" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Zerion Api free?

Yes, Zerion Api is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Zerion Api support?

Zerion Api is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Zerion Api?

It is built and maintained by vshamanov (@vshamanov); the current version is v0.1.0.

💬 Comments