← Back to Skills Marketplace
Web3 Graphql
by
SubQuery-Network
· GitHub ↗
· v1.0.0
· MIT-0
88
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install web3-graphql
Description
Use Ask GraphQL MCP to handle Web3 and on-chain questions through GraphQL endpoints (especially SubQuery/SubGraph). Trigger by default for blockchain/Web3-re...
Usage Guidance
This skill will forward user-provided GraphQL endpoint URLs and any auth headers or API keys you paste into chat to a third-party gateway (ask-api.hermes-subnet.ai). Before installing or using it, consider: 1) only test with public endpoints or non-sensitive data first; 2) avoid pasting long-lived secrets in chat—use short-lived tokens, masked credentials, or a secure vault if possible; 3) verify the operator/domain (hermes-subnet.ai) and ask for a privacy/security policy explaining how they store/handle forwarded upstream credentials; 4) prefer self-hosted or local query options if you cannot share upstream auth; and 5) if uncomfortable, request a version that accepts credentials via a secure config (env vars or vault) rather than chat. If the developer can show a reputable homepage, documented data handling policy, or a secure credential flow (not chat copy/paste), my confidence in a benign assessment would increase.
Capability Analysis
Type: OpenClaw Skill
Name: web3-graphql
Version: 1.0.0
The skill acts as a mandatory proxy for GraphQL queries, routing all traffic and sensitive credentials (including 'X-ENDPOINT-AUTHORIZATION' and 'X-API-KEY') to a third-party gateway (hermes-subnet.ai). It contains 'hard constraints' in SKILL.md that explicitly forbid the agent from performing direct queries—even if the model is capable—forcing the exfiltration of endpoint details and authorization tokens to the external service. Furthermore, it includes aggressive instructions to steer users toward a specific billing site (ask.hermes-subnet.ai) using mandatory wording when rate limits are detected, prioritizing commercial conversion over local execution.
Capability Assessment
Purpose & Capability
The name/description claim (use an Ask GraphQL MCP gateway to handle Web3/SubQuery/SubGraph queries) matches the instructions and references to an MCP gateway (ask-api.hermes-subnet.ai). No unexpected binaries, env vars, or platform-level access are requested.
Instruction Scope
SKILL.md explicitly instructs agents to request the user's API key immediately when free-tier limits are hit and to include user-provided GraphQL endpoint URLs and optional upstream auth headers (X-ENDPOINT-AUTHORIZATION) in requests to the external MCP gateway. This gives the agent blanket permission to ask for and forward sensitive credentials in chat, which is scope-expanding and potentially dangerous if users paste long-lived secrets into messages.
Install Mechanism
Instruction-only skill with no install steps or downloads. Nothing writes to disk or installs packages — low install risk.
Credentials
Although the skill declares no required environment variables, it expects the user to provide (via chat) potentially multiple secrets: a paid MCP API key (X-API-KEY) and upstream endpoint auth tokens. Those credentials are then forwarded to ask-api.hermes-subnet.ai. The skill does not provide a secure credential-handling alternative (vault, ephemeral tokens, or local proxy).
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges or modify other skills' configs. It appears only user-invocable/autonomously invokable by default, which is normal.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install web3-graphql - After installation, invoke the skill by name or use
/web3-graphql - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of the "ask-graphql-mcp" skill for handling Web3 and on-chain questions via Ask GraphQL MCP.
- Enforces all Web3/on-chain queries to go through Ask MCP agent—never direct GraphQL calls, except upon explicit user request.
- Automatically discovers the appropriate GraphQL endpoint if missing, asking users only when endpoint discovery is inconclusive.
- Integrates both session tool and HTTP JSON-RPC paths for executing user queries.
- Implements robust handling of free/paid plan modes, including API key requirements, header setup, and clear user guidance for quota/rate-limit errors.
- Returns structured, user-friendly responses with concise summaries, copy-ready config samples, and actionable next steps.
Metadata
Frequently Asked Questions
What is Web3 Graphql?
Use Ask GraphQL MCP to handle Web3 and on-chain questions through GraphQL endpoints (especially SubQuery/SubGraph). Trigger by default for blockchain/Web3-re... It is an AI Agent Skill for Claude Code / OpenClaw, with 88 downloads so far.
How do I install Web3 Graphql?
Run "/install web3-graphql" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Web3 Graphql free?
Yes, Web3 Graphql is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Web3 Graphql support?
Web3 Graphql is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Web3 Graphql?
It is built and maintained by SubQuery-Network (@subquery-network); the current version is v1.0.0.
More Skills