← Back to Skills Marketplace
daav3

Api3 Feed Manager

by dave · GitHub ↗ · v0.4.0 · MIT-0
cross-platform ⚠ suspicious
118
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install api3-feed-manager
Description
Discover, activate, fund, and maintain Api3 data feeds permissionlessly for downstream agent projects. Use when an agent needs a decentralized data feed pric...
README (SKILL.md)

Api3 Feed Manager

This skill is the oracle-enablement layer for agent-built projects that need reliable, decentralized, onchain data feeds.

It is designed to let agents:

  • find the correct Api3 feed
  • distinguish between feeds that are merely discoverable and feeds that are currently active
  • determine whether a feed is already usable
  • fund/activate it when possible
  • maintain runway for continued operation

without requiring manual coordination with the Api3 team.

When to use

Use this skill when:

  • a project needs a reliable, onchain, decentralized price feed
  • an agent wants to deploy something that depends on a live oracle
  • an existing feed may need a top-up or runway check
  • a downstream skill or app needs feed activation as a prerequisite

Core modes

1. discover-feed

Use when you need to identify the best Api3 data feed for:

  • an asset
  • a pair
  • a chain
  • a specific oracle use case

Expected output:

  • feed identity
  • chain availability
  • whether it is discoverable
  • whether it appears active/usable
  • whether activation may be needed
  • any ambiguity or missing mapping

2. ensure-feed-active

Use when you know the required feed and want to ensure it has enough funding/runway.

Default target runway:

  • 90 days

Expected output:

  • current funding/liveness status
  • estimated runway
  • whether funding/top-up is needed
  • execution path or exact transaction instructions

3. check-feed-runway

Use to inspect an already-known feed and estimate maintenance needs.

Expected output:

  • current status
  • remaining runway estimate
  • whether action is required soon

4. top-up-feed

Use when a feed exists but needs more runway.

Expected output:

  • required funding token/amount
  • top-up execution plan
  • resulting status if executed

5. maintain-feed

Use for maintenance mode when one or more project feeds must remain alive.

Expected output:

  • current state per feed
  • top-up recommendation or actions taken
  • next maintenance checkpoint recommendation

Inputs to gather before acting

Collect these first when available:

  • target chain
  • asset or pair required
  • use case (e.g. lending collateral pricing, borrow asset pricing)
  • desired runway in days
  • whether execution is allowed or discovery-only
  • wallet/funder available to the agent

Operating rules

  1. Do not pretend a feed is active without checking.
  2. Distinguish clearly between:
    • feed missing
    • feed present but unfunded
    • feed available on another chain only
    • feed exists but agent lacks execution capability
  3. Prefer permissionless operation paths.
  4. If a step cannot be done permissionlessly, say exactly why.
  5. Return concrete feed identifiers and maintenance recommendations.
  6. If discovery is ambiguous, surface the ambiguity instead of guessing.

Suggested workflow

For a new project

  1. Discover feed
  2. Confirm chain/feed suitability
  3. Check whether active/funded
  4. Ensure 90-day runway
  5. Return feed details to downstream builder/deployer

For an existing project

  1. Check current runway
  2. If below threshold, top up
  3. Return next maintenance recommendation

Output contract

Aim to return structured results containing:

  • feedFound
  • discoverable
  • active
  • activationPossible
  • statusClassification
  • feedName
  • feedAddressOrId
  • chain
  • funded
  • runwayEstimateDays
  • requiredFundingAsset
  • estimatedFundingAmount
  • actionsTaken
  • transactions
  • nextMaintenanceRecommendation
  • warnings

Current implementation status

Current honest state:

  • feed discovery and readiness inspection: implemented
  • exact guarded buySubscription(...) execution: implemented
  • execution modes:
    • direct
    • wrapper when exact wrapper calldata is derivable safely
    • auto
  • machine-usable funding state classification: implemented
    • not-needed
    • executable
    • browser-assisted
    • unsupported
  • browser-assisted funding should stay automatable where safe
    • use browser-plan to produce the exact Market flow
    • if the required UI is reachable, execute that plan with the browser tool instead of downgrading to a vague manual handoff
    • after any funding execution, re-run feed readiness before claiming the feed is ready for downstream oracle or EVK steps
  • browser-assisted funding planning: implemented via browser-plan

Still not universal:

  • not every funding path is exact onchain-executable yet
  • some flows still require browser-assisted automation
  • unsupported cases must still fail closed and be reported explicitly

Current priorities:

  1. broaden executable funding coverage beyond the first exact family
  2. keep browser-assisted flows automatable where safe
  3. preserve explicit state classification instead of overclaiming support
  4. improve maintenance-mode and multi-feed workflows

Downstream EVK canary handoff

When this skill hands off to downstream EVK deployment tooling or canary execution:

  • require a signer-backed dry-run before any real send
  • treat multi-transaction deployment plans as sequential, not parallel
  • if later transactions depend on contracts created earlier in the same plan, wait for each receipt before sending the next transaction
  • if funding landed through the browser-assisted branch, execute the returned browser-plan when the Market flow is reachable and then re-run readiness before continuing
  • do not collapse fundingExecutionClassification.state into a generic “ready”; preserve the exact branch all the way into downstream reporting
  • do not assume real-send ready means “safe to fire blind”, it only means the plan has executable payloads and still needs a final operator check
  • if downstream EVK work needs proof of real borrowability, treat that as a separate post-deploy milestone rather than equating deployment success with borrowability
  • if the operator intentionally wants a duplicate or near-duplicate market attempt, require duplicatePolicy: "warn-only" so the planner keeps the path deployable and emits an explicit warning instead of silently bypassing duplicate protection
Usage Guidance
This skill appears to do what it says: discover Api3 Market feeds, assess readiness, and prepare/execute funding. Important things to consider before installing or granting it runtime permissions: - Execution requires a signer: the skill can ask for a private key or otherwise obtain signing capability to send on-chain transactions. Only provide signing access if you explicitly trust the skill and limit funds (use an ephemeral or test wallet where possible). - Prefer supplying a signer via a safe connector (hardware wallet, delegated signer API with fine-grained limits, or a dry-run-only policy) rather than pasting long-term private keys directly. - Require and verify the skill’s dry-run output and transaction details before allowing any real send. The SKILL.md explicitly recommends a signer-backed dry-run; enforce that in your agent policy. - The package is Node-based and depends on ethers and @api3 packages; ensure the runtime environment will not install unvetted packages automatically and review the bundled scripts if you will run them locally. - If you plan to allow autonomous invocation, consider restricting or gating execution modes so the agent cannot send transactions without explicit, per-operation approval. Overall the packaging and instructions are coherent with its purpose, but treat signing capability as a high-sensitivity permission and limit it accordingly.
Capability Analysis
Type: OpenClaw Skill Name: api3-feed-manager Version: 0.4.0 The skill provides legitimate functionality for managing Api3 data feeds but is classified as suspicious due to high-risk implementation patterns. Specifically, the 'execute-buy-subscription' command in 'scripts/api3-feed-manager.js' requires passing raw private keys as command-line arguments, which is a significant security vulnerability. Furthermore, 'SKILL.md' instructs the AI agent to perform browser-automated wallet interactions via 'browser-plan', a high-privilege capability that could be exploited to authorize unintended transactions. While the code logic is transparent and communicates only with official Api3 domains (market.api3.org), the combination of raw credential handling and automated financial execution warrants caution.
Capability Tags
cryptorequires-walletcan-make-purchasescan-sign-transactionsrequires-sensitive-credentials
Capability Assessment
Purpose & Capability
Name, README, SKILL.md, spec docs, and the bundled JS all align: the skill discovers Api3 Market feeds, inspects on-chain readiness, prepares/executessubscription purchase calls, and produces browser-assisted plans. Dependencies (ethers, @api3 packages) are appropriate for this purpose.
Instruction Scope
SKILL.md explicitly describes discovery, readiness checks, funding/top-up, browser-assisted plans, and a required signer-backed dry-run before any real send. The runtime/CLI supports passing an RPC URL and a private key for execute-buy-subscription. The instructions do not attempt to read unrelated system files or secrets, but they do assume the agent will obtain signing capability (private key or signer) to perform onchain actions — which is necessary for the stated execution modes.
Install Mechanism
There is no install spec (instruction-only in registry), but the package includes bundled Node scripts and a package.json with dependencies. Running the bundled JS requires a Node environment and the listed packages; the absence of an install step means the platform must either run the bundled script as-is or install dependencies at runtime. No external or obscure download URLs are used in the code.
Credentials
The skill declares no required env vars, and it does not demand unrelated credentials. However, to perform funding/activation it requires a signer: the CLI accepts a --private-key or expects a wallet/funder to be provided. Requesting signing authority is proportionate to the purpose but is sensitive — the agent will need either a private key, wallet connector, or other signer and explicit user consent.
Persistence & Privilege
The skill does not request always:true, does not declare persistent system-wide changes, and does not attempt to modify other skills. Autonomous invocation is allowed (platform default) but that is normal for skills; combined with onchain execution capability this increases operational risk only if the user grants signing privileges without safeguards.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install api3-feed-manager
  3. After installation, invoke the skill by name or use /api3-feed-manager
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.4.0
## api3-feed-manager v0.4.0 - Expanded README and SKILL documentation with explicit implementation status, operating modes, and executable state classification for funding and feed activation. - Added CHANGELOG.md file. - Improved handling and reporting for browser-assisted funding and automation cases. - Output now includes concrete, machine-usable state for funding execution (e.g., `not-needed`, `executable`, `browser-assisted`, `unsupported`). - Strengthened guidance and checks for downstream agent workflows, dry-runs, and maintenance operations. - Broadened automation capabilities for funding and feed activation flows; unsupported cases now fail closed and report clearly.
v0.2.1
Update SKILL.md from the latest GitHub version.
v0.2.0
Initial public release.
Metadata
Slug api3-feed-manager
Version 0.4.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 3
Frequently Asked Questions

What is Api3 Feed Manager?

Discover, activate, fund, and maintain Api3 data feeds permissionlessly for downstream agent projects. Use when an agent needs a decentralized data feed pric... It is an AI Agent Skill for Claude Code / OpenClaw, with 118 downloads so far.

How do I install Api3 Feed Manager?

Run "/install api3-feed-manager" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Api3 Feed Manager free?

Yes, Api3 Feed Manager is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Api3 Feed Manager support?

Api3 Feed Manager is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Api3 Feed Manager?

It is built and maintained by dave (@daav3); the current version is v0.4.0.

💬 Comments