← 返回 Skills 市场
daav3

Api3 Feed Manager

作者 dave · GitHub ↗ · v0.4.0 · MIT-0
cross-platform ⚠ suspicious
118
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install api3-feed-manager
功能描述
Discover, activate, fund, and maintain Api3 data feeds permissionlessly for downstream agent projects. Use when an agent needs a decentralized data feed pric...
使用说明 (SKILL.md)

Api3 Feed Manager

This skill is the oracle-enablement layer for agent-built projects that need reliable, decentralized, onchain data feeds.

It is designed to let agents:

  • find the correct Api3 feed
  • distinguish between feeds that are merely discoverable and feeds that are currently active
  • determine whether a feed is already usable
  • fund/activate it when possible
  • maintain runway for continued operation

without requiring manual coordination with the Api3 team.

When to use

Use this skill when:

  • a project needs a reliable, onchain, decentralized price feed
  • an agent wants to deploy something that depends on a live oracle
  • an existing feed may need a top-up or runway check
  • a downstream skill or app needs feed activation as a prerequisite

Core modes

1. discover-feed

Use when you need to identify the best Api3 data feed for:

  • an asset
  • a pair
  • a chain
  • a specific oracle use case

Expected output:

  • feed identity
  • chain availability
  • whether it is discoverable
  • whether it appears active/usable
  • whether activation may be needed
  • any ambiguity or missing mapping

2. ensure-feed-active

Use when you know the required feed and want to ensure it has enough funding/runway.

Default target runway:

  • 90 days

Expected output:

  • current funding/liveness status
  • estimated runway
  • whether funding/top-up is needed
  • execution path or exact transaction instructions

3. check-feed-runway

Use to inspect an already-known feed and estimate maintenance needs.

Expected output:

  • current status
  • remaining runway estimate
  • whether action is required soon

4. top-up-feed

Use when a feed exists but needs more runway.

Expected output:

  • required funding token/amount
  • top-up execution plan
  • resulting status if executed

5. maintain-feed

Use for maintenance mode when one or more project feeds must remain alive.

Expected output:

  • current state per feed
  • top-up recommendation or actions taken
  • next maintenance checkpoint recommendation

Inputs to gather before acting

Collect these first when available:

  • target chain
  • asset or pair required
  • use case (e.g. lending collateral pricing, borrow asset pricing)
  • desired runway in days
  • whether execution is allowed or discovery-only
  • wallet/funder available to the agent

Operating rules

  1. Do not pretend a feed is active without checking.
  2. Distinguish clearly between:
    • feed missing
    • feed present but unfunded
    • feed available on another chain only
    • feed exists but agent lacks execution capability
  3. Prefer permissionless operation paths.
  4. If a step cannot be done permissionlessly, say exactly why.
  5. Return concrete feed identifiers and maintenance recommendations.
  6. If discovery is ambiguous, surface the ambiguity instead of guessing.

Suggested workflow

For a new project

  1. Discover feed
  2. Confirm chain/feed suitability
  3. Check whether active/funded
  4. Ensure 90-day runway
  5. Return feed details to downstream builder/deployer

For an existing project

  1. Check current runway
  2. If below threshold, top up
  3. Return next maintenance recommendation

Output contract

Aim to return structured results containing:

  • feedFound
  • discoverable
  • active
  • activationPossible
  • statusClassification
  • feedName
  • feedAddressOrId
  • chain
  • funded
  • runwayEstimateDays
  • requiredFundingAsset
  • estimatedFundingAmount
  • actionsTaken
  • transactions
  • nextMaintenanceRecommendation
  • warnings

Current implementation status

Current honest state:

  • feed discovery and readiness inspection: implemented
  • exact guarded buySubscription(...) execution: implemented
  • execution modes:
    • direct
    • wrapper when exact wrapper calldata is derivable safely
    • auto
  • machine-usable funding state classification: implemented
    • not-needed
    • executable
    • browser-assisted
    • unsupported
  • browser-assisted funding should stay automatable where safe
    • use browser-plan to produce the exact Market flow
    • if the required UI is reachable, execute that plan with the browser tool instead of downgrading to a vague manual handoff
    • after any funding execution, re-run feed readiness before claiming the feed is ready for downstream oracle or EVK steps
  • browser-assisted funding planning: implemented via browser-plan

Still not universal:

  • not every funding path is exact onchain-executable yet
  • some flows still require browser-assisted automation
  • unsupported cases must still fail closed and be reported explicitly

Current priorities:

  1. broaden executable funding coverage beyond the first exact family
  2. keep browser-assisted flows automatable where safe
  3. preserve explicit state classification instead of overclaiming support
  4. improve maintenance-mode and multi-feed workflows

Downstream EVK canary handoff

When this skill hands off to downstream EVK deployment tooling or canary execution:

  • require a signer-backed dry-run before any real send
  • treat multi-transaction deployment plans as sequential, not parallel
  • if later transactions depend on contracts created earlier in the same plan, wait for each receipt before sending the next transaction
  • if funding landed through the browser-assisted branch, execute the returned browser-plan when the Market flow is reachable and then re-run readiness before continuing
  • do not collapse fundingExecutionClassification.state into a generic “ready”; preserve the exact branch all the way into downstream reporting
  • do not assume real-send ready means “safe to fire blind”, it only means the plan has executable payloads and still needs a final operator check
  • if downstream EVK work needs proof of real borrowability, treat that as a separate post-deploy milestone rather than equating deployment success with borrowability
  • if the operator intentionally wants a duplicate or near-duplicate market attempt, require duplicatePolicy: "warn-only" so the planner keeps the path deployable and emits an explicit warning instead of silently bypassing duplicate protection
安全使用建议
This skill appears to do what it says: discover Api3 Market feeds, assess readiness, and prepare/execute funding. Important things to consider before installing or granting it runtime permissions: - Execution requires a signer: the skill can ask for a private key or otherwise obtain signing capability to send on-chain transactions. Only provide signing access if you explicitly trust the skill and limit funds (use an ephemeral or test wallet where possible). - Prefer supplying a signer via a safe connector (hardware wallet, delegated signer API with fine-grained limits, or a dry-run-only policy) rather than pasting long-term private keys directly. - Require and verify the skill’s dry-run output and transaction details before allowing any real send. The SKILL.md explicitly recommends a signer-backed dry-run; enforce that in your agent policy. - The package is Node-based and depends on ethers and @api3 packages; ensure the runtime environment will not install unvetted packages automatically and review the bundled scripts if you will run them locally. - If you plan to allow autonomous invocation, consider restricting or gating execution modes so the agent cannot send transactions without explicit, per-operation approval. Overall the packaging and instructions are coherent with its purpose, but treat signing capability as a high-sensitivity permission and limit it accordingly.
功能分析
Type: OpenClaw Skill Name: api3-feed-manager Version: 0.4.0 The skill provides legitimate functionality for managing Api3 data feeds but is classified as suspicious due to high-risk implementation patterns. Specifically, the 'execute-buy-subscription' command in 'scripts/api3-feed-manager.js' requires passing raw private keys as command-line arguments, which is a significant security vulnerability. Furthermore, 'SKILL.md' instructs the AI agent to perform browser-automated wallet interactions via 'browser-plan', a high-privilege capability that could be exploited to authorize unintended transactions. While the code logic is transparent and communicates only with official Api3 domains (market.api3.org), the combination of raw credential handling and automated financial execution warrants caution.
能力标签
cryptorequires-walletcan-make-purchasescan-sign-transactionsrequires-sensitive-credentials
能力评估
Purpose & Capability
Name, README, SKILL.md, spec docs, and the bundled JS all align: the skill discovers Api3 Market feeds, inspects on-chain readiness, prepares/executessubscription purchase calls, and produces browser-assisted plans. Dependencies (ethers, @api3 packages) are appropriate for this purpose.
Instruction Scope
SKILL.md explicitly describes discovery, readiness checks, funding/top-up, browser-assisted plans, and a required signer-backed dry-run before any real send. The runtime/CLI supports passing an RPC URL and a private key for execute-buy-subscription. The instructions do not attempt to read unrelated system files or secrets, but they do assume the agent will obtain signing capability (private key or signer) to perform onchain actions — which is necessary for the stated execution modes.
Install Mechanism
There is no install spec (instruction-only in registry), but the package includes bundled Node scripts and a package.json with dependencies. Running the bundled JS requires a Node environment and the listed packages; the absence of an install step means the platform must either run the bundled script as-is or install dependencies at runtime. No external or obscure download URLs are used in the code.
Credentials
The skill declares no required env vars, and it does not demand unrelated credentials. However, to perform funding/activation it requires a signer: the CLI accepts a --private-key or expects a wallet/funder to be provided. Requesting signing authority is proportionate to the purpose but is sensitive — the agent will need either a private key, wallet connector, or other signer and explicit user consent.
Persistence & Privilege
The skill does not request always:true, does not declare persistent system-wide changes, and does not attempt to modify other skills. Autonomous invocation is allowed (platform default) but that is normal for skills; combined with onchain execution capability this increases operational risk only if the user grants signing privileges without safeguards.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install api3-feed-manager
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /api3-feed-manager 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.4.0
## api3-feed-manager v0.4.0 - Expanded README and SKILL documentation with explicit implementation status, operating modes, and executable state classification for funding and feed activation. - Added CHANGELOG.md file. - Improved handling and reporting for browser-assisted funding and automation cases. - Output now includes concrete, machine-usable state for funding execution (e.g., `not-needed`, `executable`, `browser-assisted`, `unsupported`). - Strengthened guidance and checks for downstream agent workflows, dry-runs, and maintenance operations. - Broadened automation capabilities for funding and feed activation flows; unsupported cases now fail closed and report clearly.
v0.2.1
Update SKILL.md from the latest GitHub version.
v0.2.0
Initial public release.
元数据
Slug api3-feed-manager
版本 0.4.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 3
常见问题

Api3 Feed Manager 是什么?

Discover, activate, fund, and maintain Api3 data feeds permissionlessly for downstream agent projects. Use when an agent needs a decentralized data feed pric... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 118 次。

如何安装 Api3 Feed Manager?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install api3-feed-manager」即可一键安装,无需额外配置。

Api3 Feed Manager 是免费的吗?

是的,Api3 Feed Manager 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Api3 Feed Manager 支持哪些平台?

Api3 Feed Manager 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Api3 Feed Manager?

由 dave(@daav3)开发并维护,当前版本 v0.4.0。

💬 留言讨论