← Back to Skills Marketplace
478
Downloads
1
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install moralis-streams-api
Description
Real-time blockchain event monitoring with webhooks. Use when user asks about setting up webhooks, real-time event streaming, monitoring wallet addresses, tr...
Usage Guidance
This skill is coherent and appears to implement Moralis Streams documentation via curl calls. Before installing: 1) Confirm you trust the source (owner ID is non-human) by checking the linked GitHub repo/docs URL independently; 2) Keep your MORALIS_API_KEY secret—do not paste it into chat; place it in a local .env and add .env to .gitignore as the docs advise; 3) Verify webhook endpoints you configure accept and quickly return 2xx and implement signature verification (x-signature) as documented; 4) Be careful with 'allAddresses' streams—they can generate very large volumes and cost more; and 5) If you need stronger assurance, review the referenced GitHub repository and Moralis official docs to confirm nothing has been altered.
Capability Analysis
Type: OpenClaw Skill
Name: moralis-streams-api
Version: 1.2.1
The skill is designed for legitimate interaction with the Moralis Streams API, providing extensive documentation and `curl` examples for blockchain event monitoring. However, it is classified as 'suspicious' due to the broad `Bash` permission in `SKILL.md` and the direct use of `curl` commands with string interpolation for API parameters. While the provided examples target the legitimate Moralis API and the documentation advises secure API key handling, the inherent risk of command injection exists if the AI agent's input sanitization for user-provided parameters (e.g., `description`, `tag`, or `webhookUrl` if it were directly executed) is not robust. This represents a potential vulnerability (RCE risk) rather than clear evidence of intentional malicious behavior.
Capability Assessment
Purpose & Capability
Name/description match the requested inputs: the skill is about creating/reading/updating Streams webhooks and only requires curl and a MORALIS_API_KEY. The declared primary credential (MORALIS_API_KEY) and required binary (curl) are appropriate and proportional.
Instruction Scope
SKILL.md is a docs-heavy, step-by-step instruction set that only tells the agent to use the Streams API endpoints and to check the MORALIS_API_KEY environment variable. It explicitly warns not to ask users to paste API keys into chat and gives safe guidance for local .env discovery. It does not instruct reading unrelated files, exfiltrating data, or calling unknown endpoints.
Install Mechanism
No install spec and no code files — instruction-only. This is lowest-risk: nothing is downloaded or written by the skill beyond suggested local .env creation steps that are user-driven.
Credentials
Only one env var is required (MORALIS_API_KEY) and it is the expected credential for calling the Moralis Streams API. The SKILL.md only references this env var and no unrelated secrets or config paths.
Persistence & Privilege
The skill is not always-enabled and does not request elevated persistence. It does not modify other skills or system-wide settings. Autonomous invocation is allowed by default but is not combined with other concerning privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install moralis-streams-api - After installation, invoke the skill by name or use
/moralis-streams-api - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.2.1
**Added project homepage and repository links to skill metadata.**
- Introduced `homepage` and `repository` fields in the metadata section for direct access to documentation and source code.
- No functional/API changes. All core usage and instructions remain unchanged.
v1.2.0
Version 1.2.0
- Added detailed documentation on delivery guarantees, error handling, and triggers (see new references folder files).
- Expanded explanation of stream status values to include error and terminated states.
- Documented new and critical auto-termination behavior for erroring streams.
- Added references for configuring native balances and using read-only triggers in webhooks.
- Updated common pitfalls section with new requirements about 200 response for test webhooks and unrecoverable states.
- Improved quick reference sections with richer configuration and troubleshooting guidance.
v0.1.0
Initial release: real-time blockchain event monitoring API for EVM chains
- Provides webhook-based monitoring for wallet activity, token/NFT transfers, and contract events in real-time.
- Supports creation, update, deletion, and address management for streams via the Moralis Streams API.
- Enforces correct HTTP methods (PUT for create, POST for update, DELETE for delete streams).
- Requires a valid MORALIS_API_KEY in the environment; does not support in-chat key entry.
- Extensive guidance on common mistakes and correct usage patterns (stream IDs, chain IDs, status values).
- Includes a catalog of all 20 available Streams API endpoints for streamlined discovery.
Metadata
Frequently Asked Questions
What is Moralis Streams Api?
Real-time blockchain event monitoring with webhooks. Use when user asks about setting up webhooks, real-time event streaming, monitoring wallet addresses, tr... It is an AI Agent Skill for Claude Code / OpenClaw, with 478 downloads so far.
How do I install Moralis Streams Api?
Run "/install moralis-streams-api" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Moralis Streams Api free?
Yes, Moralis Streams Api is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Moralis Streams Api support?
Moralis Streams Api is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Moralis Streams Api?
It is built and maintained by novnski (@novnski); the current version is v1.2.1.
More Skills