← Back to Skills Marketplace
202
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install nodit-openapi-skill
Description
Operate Nodit Web3 Data API reads through UXC with a curated OpenAPI schema, API-key auth, and overlap-aware guardrails.
Usage Guidance
This skill appears to be a straightforward read-only integration for the Nodit Web3 Data API, but take these precautions before installing or providing secrets:
- Verify the source and origin: the skill's 'source' and homepage are unknown. Prefer skills published by known authors or official sources.
- Do not supply your Nodit API key until you are comfortable with the author and repo. SKILL.md expects you to store a secret in NODIT_API_KEY and register it with uxc, but the skill metadata does not declare that requirement—confirm the credential name and binding before use.
- Ensure you have uxc installed and understand what uxc auth bindings do; they can cause the CLI to attach credentials to matching hosts.
- If you plan to run the included sanity script (scripts/validate.sh), note it requires jq and ripgrep (rg). Those are development-time checks, not runtime behavior, but they are undeclared in the registry metadata.
- Network access to web3.nodit.io and raw.githubusercontent.com is required; be aware of where schemas and runtime calls go.
If you still want to proceed: (1) inspect the OpenAPI schema (references/nodit-web3.openapi.json) to confirm endpoints; (2) add/confirm the NODIT_API_KEY requirement in your environment only after you verify the publisher; (3) consider running the validation script locally to confirm file integrity, and restrict the API key to the minimum scope permitted by Nodit (if possible).
Capability Analysis
Type: OpenClaw Skill
Name: nodit-openapi-skill
Version: 1.0.0
The skill is a well-structured integration for the Nodit Web3 Data API, focusing exclusively on read-only operations such as balance lookups and transaction history. It utilizes the 'uxc' utility for command execution and authentication, includes explicit guardrails for handling rate limits (HTTP 429), and provides a comprehensive OpenAPI schema (nodit-web3.openapi.json). No indicators of data exfiltration, malicious execution, or prompt injection were found.
Capability Assessment
Purpose & Capability
The name, description, SKILL.md, and embedded OpenAPI schema all consistently describe a read-only Nodit Web3 Data API integration (entity lookup, balances, transactions, token metadata/prices). That purpose reasonably explains the included files and instructions. However, the registry metadata lists no required environment variables while the runtime instructions explicitly require a Nodit API key (NODIT_API_KEY) and network access; this mismatch should be corrected.
Instruction Scope
SKILL.md stays within scope: it instructs the agent to use the 'uxc' tooling, create a credential binding using an API key header (X-API-KEY), link a fixed CLI wrapper, and perform only read operations. It does not instruct the agent to read unrelated system files or exfiltrate arbitrary data. The instructions do require network access to web3.nodit.io and raw.githubusercontent.com for the schema URL, which is consistent with the stated workflow.
Install Mechanism
There is no install spec (instruction-only), so nothing is automatically downloaded or written by the skill. That is low-risk. The repository includes a validation script (scripts/validate.sh) that requires jq and ripgrep (rg) if you run it locally; those are not runtime installs but are undeclared dependencies in the metadata.
Credentials
The SKILL.md explicitly requires a Nodit API key and shows commands that rely on an environment variable (NODIT_API_KEY) and uxc auth bindings. Yet the registry metadata declares no required env vars or primary credential. This is a meaningful inconsistency: the skill needs a secret (NODIT_API_KEY) to operate correctly but that requirement is not surfaced in the metadata. Users should not provide an API key until they verify the provider and intent.
Persistence & Privilege
The skill does not request always:true and does not include any install-time hooks or modifications to other skills. It describes use of an external CLI (uxc) and suggests creating a linked CLI alias, but nothing in the files indicates it will persistently modify other skill configs or force-enable itself.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install nodit-openapi-skill - After installation, invoke the skill by name or use
/nodit-openapi-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of nodit-openapi-skill, enabling read-only operations on the Nodit Web3 Data API via UXC and a curated OpenAPI schema.
- Provides support for multichain entity lookup, native balance lookup, account transaction history, token contract metadata lookup, and token price lookup by contracts.
- Implements API-key authentication using X-API-KEY header with credential guidance for uxc.
- Includes guardrails for API usage, error handling, and guidance on efficient query patterns and rate-limit responses.
- Documentation covers setup, usage workflow, available operations, and best practices for integrating Nodit’s multichain read endpoints.
Metadata
Frequently Asked Questions
What is Nodit Openapi Skill?
Operate Nodit Web3 Data API reads through UXC with a curated OpenAPI schema, API-key auth, and overlap-aware guardrails. It is an AI Agent Skill for Claude Code / OpenClaw, with 202 downloads so far.
How do I install Nodit Openapi Skill?
Run "/install nodit-openapi-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Nodit Openapi Skill free?
Yes, Nodit Openapi Skill is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Nodit Openapi Skill support?
Nodit Openapi Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Nodit Openapi Skill?
It is built and maintained by jolestar (@jolestar); the current version is v1.0.0.
More Skills