← Back to Skills Marketplace
1335
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install zapper-api
Description
Query DeFi portfolios, token holdings, NFTs, transactions, and prices via Zapper API. Supports 50+ chains. Use when user asks about wallet balances, DeFi positions, NFT collections, token prices, or transaction history.
Usage Guidance
This skill appears to be a straightforward Zapper API client. Before installing, confirm you trust the publisher (source is listed as unknown) and prefer exporting ZAPPER_API_KEY as an environment variable rather than storing it in ~/.config/zapper/addresses.json if you want to avoid keeping the key in plaintext. Review the shipped scripts locally (scripts/zapper.py) yourself to verify there are no hidden network calls beyond https://public.zapper.xyz/graphql. Use a limited or free-tier API key where possible, and rotate/revoke the key if you stop using the skill or if you spot unexpected behavior.
Capability Analysis
Type: OpenClaw Skill
Name:
Developer:
Version:
Description: OpenClaw Agent Skill
Suspicious High-Entropy/Eval files: 1
The OpenClaw AgentSkills skill bundle for Zapper API is benign. The `scripts/zapper.py` script correctly uses `urllib.request` to interact solely with the official Zapper GraphQL API endpoint (`https://public.zapper.xyz/graphql`). It retrieves the API key from the `ZAPPER_API_KEY` environment variable or a standard user configuration file (`~/.config/zapper/addresses.json`). There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The `SKILL.md` instructions are clear, align with the stated purpose, and do not contain any prompt injection attempts against the agent.
Capability Assessment
Purpose & Capability
Name/description, SKILL.md, and scripts/zapper.py all implement a Zapper GraphQL client. Requiring python3 and a ZAPPER_API_KEY is proportional and expected for this purpose; the only config path referenced (~/.config/zapper/addresses.json) is for wallet labels and an optional apiKey.
Instruction Scope
Runtime instructions and the script limit activity to resolving addresses, calling Zapper's public GraphQL endpoint, and printing JSON/text results. The SKILL.md does suggest storing the API key in ~/.config/zapper/addresses.json but also documents using the ZAPPER_API_KEY env var; there are no instructions to read unrelated system files or exfiltrate data to unexpected endpoints.
Install Mechanism
No install spec is provided (instruction-only plus a Python script). That is low-risk; the script uses only standard library urllib for network calls and requires python3 on PATH.
Credentials
Declared primaryEnv is ZAPPER_API_KEY and no other secrets are requested. The single API key is appropriate for a client that queries a remote API. The skill optionally reads a single user config file for wallets and an apiKey, which is reasonable but does mean the API key may be stored in plaintext if the user follows that config pattern.
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges or modify other skills. The script only reads the user's config file and environment; it does not write to system paths or alter other components.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install zapper-api - After installation, invoke the skill by name or use
/zapper-api - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of zapper-api skill.
- Query DeFi portfolios, token holdings, NFTs, transactions, and prices using Zapper's API (supports 50+ chains).
- Adds command-line interface for viewing wallet balances, DeFi positions, NFT collections, token prices, and transaction history.
- Supports configuration via JSON file or environment variable.
- Includes multiple output and filtering options, including raw JSON and wallet label resolution.
Metadata
Frequently Asked Questions
What is zapper-api?
Query DeFi portfolios, token holdings, NFTs, transactions, and prices via Zapper API. Supports 50+ chains. Use when user asks about wallet balances, DeFi positions, NFT collections, token prices, or transaction history. It is an AI Agent Skill for Claude Code / OpenClaw, with 1335 downloads so far.
How do I install zapper-api?
Run "/install zapper-api" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is zapper-api free?
Yes, zapper-api is completely free (open-source). You can download, install and use it at no cost.
Which platforms does zapper-api support?
zapper-api is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created zapper-api?
It is built and maintained by zivhm (@zivhm); the current version is v1.0.0.
More Skills