web3-data-skill

Explore Web3 on-chain data using Chainbase APIs. Use this skill when the user asks about blockchain data, token holders, wallet addresses, token prices, NFTs...

This skill appears to do what it claims (query Chainbase) but has two practical transparency issues you should address before installing: (1) it reads CHAINBASE_API_KEY at runtime (defaulting to a public 'demo' key) even though the registry lists no required env vars — provide an API key only if you trust the skill and Chainbase, and expect rate limits with the demo key; (2) the included script requires curl and python3, but the metadata doesn't declare those binaries. Before installing, review scripts/chainbase.sh locally, confirm you have curl/python3 available, and decide whether to set CHAINBASE_API_KEY. If you want to be extra cautious, run the script in an isolated environment (container) and avoid supplying any sensitive keys you wouldn't give to a trusted integration.

Type: OpenClaw Skill Name: web3-data Version: 1.0.0 The skill is classified as suspicious due to critical shell injection vulnerabilities in `scripts/chainbase.sh` and prompt injection risks in `SKILL.md`. The `scripts/chainbase.sh` script constructs `curl` commands by directly concatenating unquoted shell variables (`$call_url`, `$call_header`, `$API_KEY`, `$call_body`), making it vulnerable to arbitrary command execution if an attacker can inject shell metacharacters into the endpoint or parameter arguments. Furthermore, `SKILL.md` explicitly instructs the AI agent to construct SQL queries from user input and pass them via `--sql="..."` to this vulnerable script, which also embeds the SQL string into a JSON body without proper escaping, creating a potential SQL injection against the Chainbase API and exacerbating the shell injection risk.