← Back to Skills Marketplace
Debank Skill
by
lolieatapple
· GitHub ↗
· v1.0.0
· MIT-0
108
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install debank-skill
Description
Query blockchain wallet data—balances, DeFi positions, tokens, NFTs, transactions, gas prices, and token approvals—across EVM chains via DeBank API.
README (SKILL.md)
DeBank CLI Skill
This skill uses debank-cli to query blockchain data via the DeBank Pro API.
Skill repo: https://github.com/lolieatapple/debank-skill CLI repo: https://github.com/lolieatapple/debank-cli
Prerequisites
Ensure debank-cli is installed globally:
!`which debank 2>/dev/null || echo "NOT_INSTALLED"`
If NOT_INSTALLED, install it:
npm install -g debank-cli
Then check if the API key is configured:
!`debank config show 2>&1`
If no API key is configured, ask the user for their DeBank Pro API key (obtain at https://cloud.debank.com/) and run:
debank config set-key \x3CTHE_KEY>
Available Commands
Wallet Queries
| Command | Description |
|---|---|
debank user balance \x3Caddress> |
Total USD balance across all chains |
debank user tokens \x3Caddress> [chain_id] [--all] |
Token balances (optionally filter by chain, --all includes dust) |
debank user protocols \x3Caddress> [chain_id] |
DeFi protocol positions with full detail (supply, borrow, rewards) |
debank user nfts \x3Caddress> [chain_id] |
NFT holdings |
debank user history \x3Caddress> [chain_id] [count] |
Transaction history (max 20 per page) |
debank user approvals \x3Caddress> \x3Cchain_id> |
Token approval/allowance list |
debank user chains \x3Caddress> |
Chains where this address has activity |
Token Queries
| Command | Description |
|---|---|
debank token info \x3Cchain_id> \x3Ctoken_id> |
Token details (name, symbol, decimals, price) |
debank token price \x3Cchain_id> \x3Ctoken_id> [YYYY-MM-DD] |
Current or historical price |
debank token holders \x3Cchain_id> \x3Ctoken_id> [limit] |
Top holders (default 20) |
Chain & Gas
| Command | Description |
|---|---|
debank chain list |
All supported chains |
debank chain info \x3Cchain_id> |
Chain details |
debank gas \x3Cchain_id> |
Gas prices (slow/normal/fast) |
Config & Account
| Command | Description |
|---|---|
debank config set-key \x3Ckey> |
Save API key to ~/.debank-cli/config.json |
debank config show |
Show current API key source and masked value |
debank config remove-key |
Remove saved API key |
debank account units |
Check remaining API units and usage |
Common Chain IDs
eth, bsc, matic, arb, op, base, avax, ftm, xdai, cro, linea, scroll, zksync
Native Token Addresses
For native tokens (ETH, BNB, etc.), use: 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee
Handling the Request
If the user provides $ARGUMENTS, parse them and run the appropriate debank command directly.
Otherwise, determine the best command based on the user's natural language request:
- "What's in this wallet?" / "Show me the portfolio" →
debank user balance+debank user tokens+debank user protocols - "DeFi positions" / "protocol positions" →
debank user protocols - "Token balances" →
debank user tokens - "NFTs" →
debank user nfts - "Transaction history" →
debank user history - "Token price" / "How much is X?" →
debank token price - "Gas price" →
debank gas - "Approvals" / "allowances" →
debank user approvals
For a comprehensive portfolio overview, run balance, tokens, and protocols in sequence to give a full picture.
Present the results clearly. When showing financial data, highlight the most significant positions and totals.
Usage Guidance
This skill appears to do what it says: it uses the debank-cli to query DeBank. Before installing or running it, consider these practical steps: 1) Manually review and install debank-cli yourself rather than letting an automated agent run npm -g, because npm installs execute code during install. 2) Verify the npm package and repository (maintainers, recent activity, and checksums) to reduce supply-chain risk. 3) Provide a scoped/limited DeBank Pro key if possible and understand that the CLI will save it to ~/.debank-cli/config.json — protect that file (permissions) and avoid sharing the key elsewhere. 4) Prefer to run the CLI locally in a controlled environment (container, VM) if you are concerned about executing third‑party npm code. 5) If you want higher assurance, request the skill author publish an explicit install manifest (signed release or pinned package version) or provide an audited binary instead of leaving installation to an automated agent. If the SKILL.md had asked for unrelated credentials, contained external upload endpoints, or required downloads from arbitrary URLs, the assessment would be more suspicious.
Capability Analysis
Type: OpenClaw Skill
Name: debank-skill
Version: 1.0.0
The skill acts as a wrapper for the 'debank-cli' tool, using the 'Bash' tool to execute commands and manage a DeBank API key stored in '~/.debank-cli/config.json'. While the functionality is aligned with the stated purpose in SKILL.md and README.md, the use of shell execution for user-provided arguments (e.g., wallet addresses) without explicit sanitization instructions introduces a potential shell injection vulnerability. Per the analysis criteria, the presence of risky capabilities (shell access) and potential vulnerabilities warrants a suspicious classification, although no evidence of intentional malice was found.
Capability Assessment
Purpose & Capability
The name/description (querying wallets via DeBank) matches the SKILL.md: it instructs using the debank-cli to call DeBank Pro API endpoints. There are no unrelated credentials, binaries, or actions requested that don't fit the stated purpose.
Instruction Scope
The runtime instructions tell the agent to check for and/or install a global npm package (debank-cli), run the CLI commands, and inspect/set the CLI config (which is stored at ~/.debank-cli/config.json). These actions are expected for a CLI-based integration, but they do grant the skill the ability to run shell commands and read/write a local config file containing the API key — behavior the user should consciously accept.
Install Mechanism
There is no formal install spec in the registry; the SKILL.md instructs a user/agent to run `npm install -g debank-cli`. Installing a global package from the public npm registry is a reasonable installation approach for a CLI, but npm packages run code during install and are a moderate risk if the package or its maintainers are untrusted. No downloads from arbitrary URLs or archive extraction are requested.
Credentials
The skill requires a DeBank Pro API key (documented in SKILL.md and stored by the CLI). No other environment variables or unrelated credentials are requested. Requiring the API key is proportional to the skill's function.
Persistence & Privilege
The skill does not request elevated persistence (always:false) and does not ask to modify other skills or system-wide agent settings. It only uses the CLI's own config file to store the API key, which is normal for this workflow.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install debank-skill - After installation, invoke the skill by name or use
/debank-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of DeBank Skill:
- Query blockchain wallet data using DeBank CLI and API, covering balances, DeFi positions, tokens, NFTs, approvals, and transaction history.
- Supports natural language mapping to CLI commands for wallet, token, and gas queries.
- Detailed usage instructions provided for setup, available commands, and handling user requests.
- Includes chain ID reference and native token address conventions.
- Guides users through API key setup if not already configured.
Metadata
Frequently Asked Questions
What is Debank Skill?
Query blockchain wallet data—balances, DeFi positions, tokens, NFTs, transactions, gas prices, and token approvals—across EVM chains via DeBank API. It is an AI Agent Skill for Claude Code / OpenClaw, with 108 downloads so far.
How do I install Debank Skill?
Run "/install debank-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Debank Skill free?
Yes, Debank Skill is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Debank Skill support?
Debank Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Debank Skill?
It is built and maintained by lolieatapple (@lolieatapple); the current version is v1.0.0.
More Skills