← 返回 Skills 市场

DefiLlama OpenAPI Skill

Name: DefiLlama OpenAPI Skill
Author: jolestar

作者 jolestar · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ✓ 安全检测通过

209

总下载

当前安装

版本数

在 OpenClaw 中安装

/install defillama-openapi-skill

功能描述

Operate DefiLlama public analytics APIs through UXC with a curated OpenAPI schema and read-first guardrails.

使用说明 (SKILL.md)

DefiLlama Public API Skill

Use this skill to run DefiLlama public API operations through uxc + OpenAPI.

Reuse the uxc skill for shared execution, auth, and error-handling guidance.

Prerequisites

uxc is installed and available in PATH.
Network access to https://api.llama.fi.
Access to the curated OpenAPI schema URL:
- https://raw.githubusercontent.com/holon-run/uxc/main/skills/defillama-openapi-skill/references/defillama-public.openapi.json

Scope

This skill covers a public read-only analytics surface on api.llama.fi:

protocol TVL list
per-protocol detail
chain overview reads

This skill does not cover:

write operations or account management
DefiLlama Pro key-in-path auth
split-host public services such as coins.llama.fi and yields.llama.fi
the full DefiLlama public API surface

Authentication

This public skill does not require authentication.

Core Workflow

Use the fixed link command by default:
- command -v defillama-openapi-cli
- If missing, create it: uxc link defillama-openapi-cli https://api.llama.fi --schema-url https://raw.githubusercontent.com/holon-run/uxc/main/skills/defillama-openapi-skill/references/defillama-public.openapi.json
- defillama-openapi-cli -h
Inspect operation schema first:
- defillama-openapi-cli get:/protocols -h
- defillama-openapi-cli get:/protocol/{protocol} -h
- defillama-openapi-cli get:/v2/chains -h
Prefer narrow read validation before broader reads:
- defillama-openapi-cli get:/v2/chains
- defillama-openapi-cli get:/protocols
- defillama-openapi-cli get:/protocol/{protocol} protocol=aave
Execute with key/value parameters:
- defillama-openapi-cli get:/protocol/{protocol} protocol=aave
- defillama-openapi-cli get:/v2/chains

Operations

get:/protocols
get:/protocol/{protocol}
get:/v2/chains

Guardrails

Keep automation on the JSON output envelope; do not use --text.
Parse stable fields first: ok, kind, protocol, data, error.
Treat this v1 skill as read-only. Do not imply wallet, trading, or admin support.
Public DefiLlama data is split across multiple hosts. This skill intentionally stays on api.llama.fi; use the separate Pro skill when you need the unified Pro host.
defillama-openapi-cli \x3Coperation> ... is equivalent to uxc https://api.llama.fi --schema-url \x3Cdefillama_openapi_schema> \x3Coperation> ....

References

Usage patterns: references/usage-patterns.md
Curated OpenAPI schema: references/defillama-public.openapi.json
DefiLlama API docs: https://defillama.com/docs/api

安全使用建议

This skill appears coherent and read-only, but check these before installing: ensure you trust the 'uxc' tool (SKILL.md requires it) and understand what 'uxc link' will do in your environment; confirm you are comfortable allowing network access to https://api.llama.fi and that fetching the curated OpenAPI schema from raw.githubusercontent.com is acceptable; verify the included local schema (references/defillama-public.openapi.json) and that it points only to api.llama.fi (it does); validate that you don't need DefiLlama Pro or other hosts (the skill deliberately avoids them). The validate.sh script requires jq and ripgrep (rg) for local validation only — these are not credentials but are runtime requirements for maintainers. If you rely on autonomous agent invocation, remember this skill can be invoked by agents (platform default), but its read-only scope keeps privilege limited.

功能分析

Type: OpenClaw Skill Name: defillama-openapi-skill Version: 1.0.0 The skill bundle provides a structured interface for an AI agent to interact with the public DefiLlama API using the 'uxc' CLI tool. It includes a valid OpenAPI schema, clear usage instructions in SKILL.md, and a validation script (scripts/validate.sh) that ensures the bundle adheres to expected patterns. The operations are strictly read-only analytics queries, and there is no evidence of data exfiltration, malicious execution, or prompt injection.

能力评估

ℹ Purpose & Capability

The skill's name, description, OpenAPI schema, and runtime instructions are aligned: it only exposes a small read-only subset of DefiLlama (protocols, per-protocol, chains). One minor mismatch: the SKILL.md requires the 'uxc' CLI to be present and network access to api.llama.fi, but the registry metadata lists no required binaries — the skill will fail at runtime if 'uxc' is absent. This is an operational omission rather than a security mismatch.

✓ Instruction Scope

SKILL.md limits actions to inspecting and calling three GET operations via a uxc-backed CLI, instructs to use JSON output only, and explicitly excludes write/admin operations and other hosts. It does not instruct reading unrelated files or environment variables. The included validate script is a local sanity check and not executed by the skill at runtime.

✓ Install Mechanism

No install spec is provided (instruction-only skill), so nothing is written to disk by the skill itself. The only network fetch called out is the curated OpenAPI schema on raw.githubusercontent.com (a well-known host). There is no download-from-arbitrary-server install behavior.

✓ Credentials

The skill requests no environment variables or credentials and explicitly states it is public and read-only. The included files and scripts do not reference secrets or unrelated credential stores.

✓ Persistence & Privilege

The skill does not request always:true, does not modify other skills or global agent config, and is user-invocable only. Autonomous model invocation is allowed (platform default) but the skill's scope is read-only which limits risk.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install defillama-openapi-skill
安装完成后，直接呼叫该 Skill 的名称或使用 /defillama-openapi-skill 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

- Initial release of the DefiLlama OpenAPI skill for UXC. - Enables read-only access to DefiLlama's public analytics API via a curated OpenAPI schema. - Supports protocol TVL list, per-protocol detail, and chain overview reads. - No authentication required; focuses on public endpoints from api.llama.fi only. - Outlines recommended CLI linking, operation inspection, and safe-automation guardrails.

元数据

Slug defillama-openapi-skill

版本 1.0.0

许可证 MIT-0

累计安装 2

当前安装数 2

历史版本数 1

常见问题