← Back to Skills Marketplace
UnifAI
by
Yilun Zhang
· GitHub ↗
· v1.0.4
· MIT-0
474
Downloads
0
Stars
0
Active Installs
7
Versions
Install in OpenClaw
/install unifai
Description
A CLI for searching and invoking services on the UnifAI network. Supports 40+ services across DeFi, token data, social media, web search, news, travel, sport...
Usage Guidance
This skill appears to do what it says: a CLI that finds and invokes network services, optionally signing blockchain transactions. Before installing: (1) verify the npm package and GitHub repository ownership/reputation; prefer npx if you don't want a global install; (2) do NOT put your private keys (SOLANA_PRIVATE_KEY, EVM_PRIVATE_KEY) in environment variables unless you trust the package and understand the risk — any process that can invoke the CLI (including autonomous agents) could sign transactions with those keys; (3) restrict RPC URLs to trusted providers and consider rate limits; (4) test with non‑funded keys or a testnet first. If you need higher assurance, review the unifai-sdk source code on GitHub and inspect the package before running it.
Capability Analysis
Type: OpenClaw Skill
Name: unifai
Version: 1.0.4
The skill provides a CLI for the UnifAI network, enabling an agent to interact with 40+ services including DeFi, social media, and web search. It requires highly sensitive environment variables, specifically 'SOLANA_PRIVATE_KEY' and 'EVM_PRIVATE_KEY', for local transaction signing. While the behavior is aligned with its stated purpose as a blockchain-enabled service invoker and tool access is restricted to the 'unifai' binary, the requirement for raw private keys and the broad scope of financial capabilities represent high-risk behaviors (SKILL.md, _meta.json).
Capability Assessment
Purpose & Capability
Name/description (UnifAI CLI for discovering/invoking services) match the declared binary (unifai), required API key (UNIFAI_AGENT_API_KEY), and optional signing keys/RPCs. The npm package install (unifai-sdk) is a reasonable way to provide the CLI binary.
Instruction Scope
SKILL.md instructs the agent to search then invoke via the unifai CLI and documents when signing is needed. It does not instruct the agent to read unrelated system files or exfiltrate data. It explicitly uses environment variables for keys and RPCs and warns to always inspect payload schemas before invoking.
Install Mechanism
Install uses the npm package 'unifai-sdk' to create the 'unifai' binary. This is an expected mechanism for a Node.js CLI, but npm packages are third‑party code—verify the package's authorship and audit the package if you don't trust the publisher. Using 'npx' avoids a global install.
Credentials
Only UNIFAI_AGENT_API_KEY is required which fits the described network API usage. The optional environment variables (SOLANA_PRIVATE_KEY, EVM_PRIVATE_KEY, RPC URLs) are justified for local transaction signing and RPC overrides, but they are highly sensitive — supplying private keys grants the CLI (and any agent that can invoke it) the ability to sign and submit on‑chain transactions.
Persistence & Privilege
always:false and no required config paths or system modifications are requested. The skill does not request permanent/system‑wide privileges. Autonomous invocation is allowed by default, which is normal; the skill does not elevate privileges beyond its own CLI usage.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install unifai - After installation, invoke the skill by name or use
/unifai - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.4
- Added a "metadata" section describing environment and installation requirements.
- Removed author, license, and repository fields from SKILL.md.
- No changes to CLI usage, commands, or functionality.
v1.0.3
**Changelog for unifai v1.0.3**
- Added metadata fields: author, license, homepage, and repository to SKILL.md for improved attribution and discoverability.
- Updated allowed-tools to require the local unifai binary only (removed Bash(npx…) usage).
- Clarified installation instructions to prefer global installation, and provided updated npx guidance.
- Enhanced security documentation, including a new “Security Notes” section highlighting local signing and private key usage.
- Updated version to "1.0.3" in SKILL.md.
v1.0.2
- Expanded the skill description to highlight support for 40+ services including DeFi, token data, social media, news, travel, sports, and more.
- Added a new "What it does" section summarizing search, invocation, and configuration capabilities.
- Listed available service categories and specific supported protocols/tools for improved discoverability.
- Kept all commands, workflows, and examples unchanged for continuity.
- No code or interface changes; documentation update only.
v1.0.1
- Added documentation for optional environment variables in SKILL.md (private keys and RPC URLs).
- Clarified that public RPC URL defaults are provided but can be overridden.
- Explained that all transaction signing occurs locally and referenced the open-source CLI code.
- Improved error explanation for missing RPC URLs, noting public defaults and override capability.
- No changes to core CLI usage or command syntax.
v1.0.0
**unifai 1.0.0 — Initial Public Release**
- Adds UnifAI CLI skill for searching, invoking, and signing blockchain transactions from the command line.
- Supports both `npx` and global `npm` installation for zero-install or persistent usage.
- Requires `UNIFAI_AGENT_API_KEY` for authentication; supports config file setup.
- Enables JSON-first search for tools, always returning payload schemas (field names, required fields, types).
- Provides local transaction signing via `--sign` flag using locally stored private keys and standard RPC URLs.
- Emphasizes critical agent workflow: always search before invoke, follow the payload schema—do not guess field names.
v0.1.2-1
- Added a dedicated Security Model section, clarifying that private keys are never sent to the API and on-chain actions require explicit user signing.
- Documented the separation between read-only and transactional actions for improved user clarity.
- No changes to CLI functionality; documentation updated only.
- Minor formatting and heading adjustments for readability.
v0.1.2
- Added detailed SKILL.md documenting Unifai CLI usage, configuration, service categories, and advanced options.
- Expanded coverage of supported services: DeFi, token data, social media, web search, news, travel, sports, and utilities.
- Described installation (with Homebrew) and authentication methods with clear API key priority.
- Provided extensive usage examples for searching and invoking services, including payload and output formats.
- Included troubleshooting tips, configuration file examples, and links to resources.
Metadata
Frequently Asked Questions
What is UnifAI?
A CLI for searching and invoking services on the UnifAI network. Supports 40+ services across DeFi, token data, social media, web search, news, travel, sport... It is an AI Agent Skill for Claude Code / OpenClaw, with 474 downloads so far.
How do I install UnifAI?
Run "/install unifai" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is UnifAI free?
Yes, UnifAI is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does UnifAI support?
UnifAI is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created UnifAI?
It is built and maintained by Yilun Zhang (@yilunzhang); the current version is v1.0.4.
More Skills