← 返回 Skills 市场
Alchemy
作者
aiwithabidi
· GitHub ↗
· v1.0.0
651
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install alchemy
功能描述
Alchemy — blockchain data, NFTs, token balances, transactions, gas prices, and webhooks.
使用说明 (SKILL.md)
⛓️ Alchemy
Alchemy — blockchain data, NFTs, token balances, transactions, gas prices, and webhooks.
Requirements
| Variable | Required | Description |
|---|---|---|
ALCHEMY_API_KEY |
✅ | Alchemy API key |
Quick Start
# Get ETH balance
python3 {{baseDir}}/scripts/alchemy.py get-balance --address \x3Cvalue>
# Get ERC-20 token balances
python3 {{baseDir}}/scripts/alchemy.py get-token-balances --address \x3Cvalue>
# Get transaction by hash
python3 {{baseDir}}/scripts/alchemy.py get-transaction --hash \x3Cvalue>
# Get block by number
python3 {{baseDir}}/scripts/alchemy.py get-block --block "latest"
# Get NFTs for address
python3 {{baseDir}}/scripts/alchemy.py get-nfts --address \x3Cvalue>
# Get NFT metadata
python3 {{baseDir}}/scripts/alchemy.py get-nft-metadata --contract \x3Cvalue> --token-id \x3Cvalue>
# Get token metadata
python3 {{baseDir}}/scripts/alchemy.py get-token-metadata --contract \x3Cvalue>
# Get current gas price
python3 {{baseDir}}/scripts/alchemy.py get-gas-price
# Get latest block number
python3 {{baseDir}}/scripts/alchemy.py get-block-number
# Get event logs
python3 {{baseDir}}/scripts/alchemy.py get-logs --address \x3Cvalue> --from-block "0x0" --to-block "latest" --topics \x3Cvalue>
# Get asset transfers for address
python3 {{baseDir}}/scripts/alchemy.py get-asset-transfers --address \x3Cvalue> --category "external,erc20"
# Get NFT floor price
python3 {{baseDir}}/scripts/alchemy.py get-floor-price --contract \x3Cvalue>
Output Format
All commands output JSON by default.
Script Reference
| Script | Description |
|---|---|
{baseDir}/scripts/alchemy.py |
Main CLI — all commands in one tool |
Credits
Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.
📅 Need help setting up OpenClaw for your business? Book a free consultation
安全使用建议
This skill appears to be what it claims: a small Python CLI that calls the Alchemy API and needs an ALCHEMY_API_KEY. Before installing, confirm you will provide a dedicated Alchemy API key (least privilege if possible). Be aware the script will, if the env var is not set, attempt to read a .env file under WORKSPACE or ~/.openclaw/workspace/.env to find the key — if you keep multiple secrets in that file, consider moving or isolating them. Review the script yourself if you want to check exact endpoints/parameters (there are a few minor bugs in string placeholders, but nothing that indicates malicious behavior). If you proceed, monitor and be ready to rotate the API key if you suspect leakage.
功能分析
Type: OpenClaw Skill
Name: alchemy
Version: 1.0.0
The skill is classified as suspicious due to a URL injection vulnerability in `scripts/alchemy.py`. User-supplied arguments for `address`, `contract`, and `token_id` are directly concatenated into URL paths using string replacement for GET requests (e.g., `cmd_get_nfts`, `cmd_get_nft_metadata`, `cmd_get_floor_price`). This lack of proper URL encoding or sanitization could allow an attacker to inject additional query parameters or manipulate the API request if they can control the input values, potentially leading to unexpected API behavior or information disclosure. While the script's core functionality is legitimate and there's no evidence of intentional malicious behavior like data exfiltration to unauthorized endpoints or persistence mechanisms, this vulnerability represents a significant security flaw.
能力评估
Purpose & Capability
Name/description, SKILL.md, and the included Python CLI consistently target Alchemy blockchain APIs and request a single ALCHEMY_API_KEY credential. The operations implemented (balances, NFTs, transactions, logs, gas, etc.) match the stated purpose.
Instruction Scope
SKILL.md instructs the agent to run the bundled Python CLI and only declares ALCHEMY_API_KEY. The CLI will try to read the requested variable from the environment and, if missing, will look up a .env file under WORKSPACE or the default ~/.openclaw/workspace/.env. That file-read behavior is not documented in SKILL.md and is an implementation detail you may want to know about.
Install Mechanism
This is instruction-only with no install spec; the skill ships a single Python script relying only on the stdlib. No external downloads or package installs are requested.
Credentials
Only ALCHEMY_API_KEY is required (declared as primaryEnv), which is proportionate for an Alchemy integration. However, the script also checks WORKSPACE (an undeclared env var) to locate a .env file and may read that file to obtain the key; this could expose where you keep other keys if you re-use a workspace .env file, so be cautious where secrets are stored.
Persistence & Privilege
The skill does not request always:true, does not modify system-wide configs, and has no install step that persists additional components. Autonomous invocation is allowed by default (normal for skills) but not coupled with elevated persistence.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install alchemy - 安装完成后，直接呼叫该 Skill 的名称或使用
/alchemy触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of alchemy skill:
- Provides blockchain data access: NFTs, token balances, transactions, gas prices, and webhooks via Alchemy.
- Single CLI script offering multiple commands for common blockchain queries.
- Outputs data in JSON format.
- Requires only an Alchemy API key (no external dependencies).
- Compatible with Python 3.10+.
元数据
常见问题
Alchemy 是什么？
Alchemy — blockchain data, NFTs, token balances, transactions, gas prices, and webhooks. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 651 次。
如何安装 Alchemy？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install alchemy」即可一键安装，无需额外配置。
Alchemy 是免费的吗？
是的，Alchemy 完全免费（开源免费），可自由下载、安装和使用。
Alchemy 支持哪些平台？
Alchemy 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Alchemy？
由 aiwithabidi（@aiwithabidi）开发并维护，当前版本 v1.0.0。
推荐 Skills