← Back to Skills Marketplace
207
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install meridian
Description
Use the Meridian GIS API (meridian.nodeapi.ai) to process geospatial data. Handles the full x402 payment flow automatically — sends a request, reads the 402...
Usage Guidance
This skill appears to implement a paid GIS API that charges via x402 (USDC on Base). Before installing or using it: (1) do not paste or store your wallet private key in environment variables or hand it to an agent — the skill's examples suggest passing WALLET_PRIVATE_KEY to sign payments, which would give full control of funds; prefer a workflow where you sign payments locally or use an external wallet/provider. (2) Ask the publisher to clarify the signing flow and whether client-side signing (wallet pop-up or hardware wallet) is supported instead of providing raw keys. (3) Verify the correct API host (the docs use inconsistent domains: meridian.nodeapi.ai vs meridianapi.nodeapi.ai) and independently confirm the pay_to and USDC contract addresses before sending any payments. (4) If you must use this skill, require explicit manual approval for any payment operations and avoid storing long-lived secrets in the agent environment. If the vendor cannot explain why a private key is needed or cannot provide a safer signing option, treat the skill as high-risk.
Capability Analysis
Type: OpenClaw Skill
Name: meridian
Version: 1.0.2
The skill provides GIS data processing via the Meridian API (meridian.nodeapi.ai) and implements an automated x402 payment flow using USDC on the Base network. While the functionality is clearly documented and aligned with its stated purpose, it requires the AI agent to handle a wallet private key to sign EIP-3009 authorizations for financial transactions. This represents a high-risk security pattern and a significant vulnerability, as it grants the agent the capability to authorize expenditures, which could be exploited if the agent's logic is compromised.
Capability Assessment
Purpose & Capability
The skill claims to provide GIS processing with an x402 micropayment flow, which matches the endpoints and payment docs included. However, the SKILL.md and references differ on base URLs (e.g., meridian.nodeapi.ai vs meridianapi.nodeapi.ai) and the description says "No accounts or API keys needed" while the payment flow requires signing with a wallet private key. Those inconsistencies make it unclear what credentials or user secrets are actually required.
Instruction Scope
The included instructions explicitly show using a WALLET_PRIVATE_KEY and signing EIP-3009 transferWithAuthorization to produce an X-PAYMENT header. SKILL.md and references instruct installing/using an x402 client and either automatic signing (passing a private key) or manual signing. The instructions therefore direct use of a highly sensitive secret (wallet private key) without describing safer alternatives (external wallet pop-ups, hardware wallets, or user-mediated signing).
Install Mechanism
This is an instruction-only skill (no install spec and no code files), which lowers installation risk. The docs reference third-party libraries (pip/npm 'x402') for convenience, but no automated installer is provided. The presence of install recommendations is expected but means the agent or user may be prompted to install packages.
Credentials
The skill declares no required environment variables, yet examples and the payment reference recommend supplying a WALLET_PRIVATE_KEY private key to sign payments. Requesting or advising the agent to read/store a wallet private key is high-risk and disproportionate unless the user intentionally wants the agent to hold that secret. There is no declaration of this credential in the skill metadata, and the docs do not clearly describe safer signing workflows.
Persistence & Privilege
The skill does not request always:true, does not include an install spec that would write files, and does not ask to modify other skills or system-wide settings. It appears not to request elevated persistent privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install meridian - After installation, invoke the skill by name or use
/meridian - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
API URL update: meridianapi.nodeapi.ai
v1.0.1
URL update: v2.nodeapi.ai → meridian.nodeapi.ai throughout
v1.0.0
Initial release — 28 GIS endpoints, x402/Base USDC payments, full endpoint and payment reference
Metadata
Frequently Asked Questions
What is Meridian GIS API?
Use the Meridian GIS API (meridian.nodeapi.ai) to process geospatial data. Handles the full x402 payment flow automatically — sends a request, reads the 402... It is an AI Agent Skill for Claude Code / OpenClaw, with 207 downloads so far.
How do I install Meridian GIS API?
Run "/install meridian" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Meridian GIS API free?
Yes, Meridian GIS API is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Meridian GIS API support?
Meridian GIS API is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Meridian GIS API?
It is built and maintained by eianray (@eianray); the current version is v1.0.2.
More Skills