← 返回 Skills 市场
Debank Skill
作者
lolieatapple
· GitHub ↗
· v1.0.0
· MIT-0
108
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install debank-skill
功能描述
Query blockchain wallet data—balances, DeFi positions, tokens, NFTs, transactions, gas prices, and token approvals—across EVM chains via DeBank API.
使用说明 (SKILL.md)
DeBank CLI Skill
This skill uses debank-cli to query blockchain data via the DeBank Pro API.
Skill repo: https://github.com/lolieatapple/debank-skill CLI repo: https://github.com/lolieatapple/debank-cli
Prerequisites
Ensure debank-cli is installed globally:
!`which debank 2>/dev/null || echo "NOT_INSTALLED"`
If NOT_INSTALLED, install it:
npm install -g debank-cli
Then check if the API key is configured:
!`debank config show 2>&1`
If no API key is configured, ask the user for their DeBank Pro API key (obtain at https://cloud.debank.com/) and run:
debank config set-key \x3CTHE_KEY>
Available Commands
Wallet Queries
| Command | Description |
|---|---|
debank user balance \x3Caddress> |
Total USD balance across all chains |
debank user tokens \x3Caddress> [chain_id] [--all] |
Token balances (optionally filter by chain, --all includes dust) |
debank user protocols \x3Caddress> [chain_id] |
DeFi protocol positions with full detail (supply, borrow, rewards) |
debank user nfts \x3Caddress> [chain_id] |
NFT holdings |
debank user history \x3Caddress> [chain_id] [count] |
Transaction history (max 20 per page) |
debank user approvals \x3Caddress> \x3Cchain_id> |
Token approval/allowance list |
debank user chains \x3Caddress> |
Chains where this address has activity |
Token Queries
| Command | Description |
|---|---|
debank token info \x3Cchain_id> \x3Ctoken_id> |
Token details (name, symbol, decimals, price) |
debank token price \x3Cchain_id> \x3Ctoken_id> [YYYY-MM-DD] |
Current or historical price |
debank token holders \x3Cchain_id> \x3Ctoken_id> [limit] |
Top holders (default 20) |
Chain & Gas
| Command | Description |
|---|---|
debank chain list |
All supported chains |
debank chain info \x3Cchain_id> |
Chain details |
debank gas \x3Cchain_id> |
Gas prices (slow/normal/fast) |
Config & Account
| Command | Description |
|---|---|
debank config set-key \x3Ckey> |
Save API key to ~/.debank-cli/config.json |
debank config show |
Show current API key source and masked value |
debank config remove-key |
Remove saved API key |
debank account units |
Check remaining API units and usage |
Common Chain IDs
eth, bsc, matic, arb, op, base, avax, ftm, xdai, cro, linea, scroll, zksync
Native Token Addresses
For native tokens (ETH, BNB, etc.), use: 0xeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee
Handling the Request
If the user provides $ARGUMENTS, parse them and run the appropriate debank command directly.
Otherwise, determine the best command based on the user's natural language request:
- "What's in this wallet?" / "Show me the portfolio" →
debank user balance+debank user tokens+debank user protocols - "DeFi positions" / "protocol positions" →
debank user protocols - "Token balances" →
debank user tokens - "NFTs" →
debank user nfts - "Transaction history" →
debank user history - "Token price" / "How much is X?" →
debank token price - "Gas price" →
debank gas - "Approvals" / "allowances" →
debank user approvals
For a comprehensive portfolio overview, run balance, tokens, and protocols in sequence to give a full picture.
Present the results clearly. When showing financial data, highlight the most significant positions and totals.
安全使用建议
This skill appears to do what it says: it uses the debank-cli to query DeBank. Before installing or running it, consider these practical steps: 1) Manually review and install debank-cli yourself rather than letting an automated agent run npm -g, because npm installs execute code during install. 2) Verify the npm package and repository (maintainers, recent activity, and checksums) to reduce supply-chain risk. 3) Provide a scoped/limited DeBank Pro key if possible and understand that the CLI will save it to ~/.debank-cli/config.json — protect that file (permissions) and avoid sharing the key elsewhere. 4) Prefer to run the CLI locally in a controlled environment (container, VM) if you are concerned about executing third‑party npm code. 5) If you want higher assurance, request the skill author publish an explicit install manifest (signed release or pinned package version) or provide an audited binary instead of leaving installation to an automated agent. If the SKILL.md had asked for unrelated credentials, contained external upload endpoints, or required downloads from arbitrary URLs, the assessment would be more suspicious.
功能分析
Type: OpenClaw Skill
Name: debank-skill
Version: 1.0.0
The skill acts as a wrapper for the 'debank-cli' tool, using the 'Bash' tool to execute commands and manage a DeBank API key stored in '~/.debank-cli/config.json'. While the functionality is aligned with the stated purpose in SKILL.md and README.md, the use of shell execution for user-provided arguments (e.g., wallet addresses) without explicit sanitization instructions introduces a potential shell injection vulnerability. Per the analysis criteria, the presence of risky capabilities (shell access) and potential vulnerabilities warrants a suspicious classification, although no evidence of intentional malice was found.
能力评估
Purpose & Capability
The name/description (querying wallets via DeBank) matches the SKILL.md: it instructs using the debank-cli to call DeBank Pro API endpoints. There are no unrelated credentials, binaries, or actions requested that don't fit the stated purpose.
Instruction Scope
The runtime instructions tell the agent to check for and/or install a global npm package (debank-cli), run the CLI commands, and inspect/set the CLI config (which is stored at ~/.debank-cli/config.json). These actions are expected for a CLI-based integration, but they do grant the skill the ability to run shell commands and read/write a local config file containing the API key — behavior the user should consciously accept.
Install Mechanism
There is no formal install spec in the registry; the SKILL.md instructs a user/agent to run `npm install -g debank-cli`. Installing a global package from the public npm registry is a reasonable installation approach for a CLI, but npm packages run code during install and are a moderate risk if the package or its maintainers are untrusted. No downloads from arbitrary URLs or archive extraction are requested.
Credentials
The skill requires a DeBank Pro API key (documented in SKILL.md and stored by the CLI). No other environment variables or unrelated credentials are requested. Requiring the API key is proportional to the skill's function.
Persistence & Privilege
The skill does not request elevated persistence (always:false) and does not ask to modify other skills or system-wide agent settings. It only uses the CLI's own config file to store the API key, which is normal for this workflow.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install debank-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/debank-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of DeBank Skill:
- Query blockchain wallet data using DeBank CLI and API, covering balances, DeFi positions, tokens, NFTs, approvals, and transaction history.
- Supports natural language mapping to CLI commands for wallet, token, and gas queries.
- Detailed usage instructions provided for setup, available commands, and handling user requests.
- Includes chain ID reference and native token address conventions.
- Guides users through API key setup if not already configured.
元数据
常见问题
Debank Skill 是什么？
Query blockchain wallet data—balances, DeFi positions, tokens, NFTs, transactions, gas prices, and token approvals—across EVM chains via DeBank API. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 108 次。
如何安装 Debank Skill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install debank-skill」即可一键安装，无需额外配置。
Debank Skill 是免费的吗？
是的，Debank Skill 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Debank Skill 支持哪些平台？
Debank Skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Debank Skill？
由 lolieatapple（@lolieatapple）开发并维护，当前版本 v1.0.0。
推荐 Skills