← 返回 Skills 市场
jolestar

Helius Openapi Skill

作者 jolestar · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
214
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install helius-openapi-skill
功能描述
Operate Helius Wallet API reads through UXC with a curated OpenAPI schema, API-key auth, and read-first guardrails.
使用说明 (SKILL.md)

Helius Wallet API Skill

Use this skill to run Helius Wallet API operations through uxc + OpenAPI.

Reuse the uxc skill for shared execution, auth, and error-handling guidance.

Prerequisites

  • uxc is installed and available in PATH.
  • Network access to https://api.helius.xyz.
  • Access to the curated OpenAPI schema URL:
    • https://raw.githubusercontent.com/holon-run/uxc/main/skills/helius-openapi-skill/references/helius-wallet.openapi.json
  • A Helius API key.

Scope

This skill covers a read-first Helius Wallet API surface:

  • wallet identity lookup
  • batch identity lookup
  • wallet balances
  • wallet history
  • wallet transfers
  • wallet funding source lookup

This skill does not cover:

  • Helius RPC, DAS, or WebSocket surfaces
  • transaction submission
  • webhook setup
  • the broader Helius platform beyond the selected wallet intelligence endpoints

Authentication

Helius accepts API keys by query parameter or header. This skill standardizes on X-Api-Key header auth.

Configure one API-key credential and bind it to api.helius.xyz:

uxc auth credential set helius \
  --auth-type api_key \
  --api-key-header X-Api-Key \
  --secret-env HELIUS_API_KEY

uxc auth binding add \
  --id helius \
  --host api.helius.xyz \
  --scheme https \
  --credential helius \
  --priority 100

Validate the active mapping when auth looks wrong:

uxc auth binding match https://api.helius.xyz

Core Workflow

  1. Use the fixed link command by default:

    • command -v helius-openapi-cli
    • If missing, create it:
      uxc link helius-openapi-cli https://api.helius.xyz \
        --schema-url https://raw.githubusercontent.com/holon-run/uxc/main/skills/helius-openapi-skill/references/helius-wallet.openapi.json
      
    • helius-openapi-cli -h
  2. Inspect operation schema first:

    • helius-openapi-cli get:/v1/wallet/{wallet}/identity -h
    • helius-openapi-cli post:/v1/wallet/batch-identity -h
    • helius-openapi-cli get:/v1/wallet/{wallet}/balances -h
  3. Prefer narrow validation before broader reads:

    • helius-openapi-cli get:/v1/wallet/{wallet}/identity wallet=HXsKP7wrBWaQ8T2Vtjry3Nj3oUgwYcqq9vrHDM12G664
    • helius-openapi-cli get:/v1/wallet/{wallet}/funded-by wallet=HXsKP7wrBWaQ8T2Vtjry3Nj3oUgwYcqq9vrHDM12G664
    • helius-openapi-cli get:/v1/wallet/{wallet}/balances wallet=HXsKP7wrBWaQ8T2Vtjry3Nj3oUgwYcqq9vrHDM12G664 page=1 limit=20 showNative=true
  4. Execute with key/value parameters:

    • helius-openapi-cli post:/v1/wallet/batch-identity addresses:='["HXsKP7wrBWaQ8T2Vtjry3Nj3oUgwYcqq9vrHDM12G664"]'
    • helius-openapi-cli get:/v1/wallet/{wallet}/history wallet=HXsKP7wrBWaQ8T2Vtjry3Nj3oUgwYcqq9vrHDM12G664 limit=20
    • helius-openapi-cli get:/v1/wallet/{wallet}/transfers wallet=HXsKP7wrBWaQ8T2Vtjry3Nj3oUgwYcqq9vrHDM12G664 limit=20
    • For addresses:='[...]', keep shell quoting in mind. If your shell mangles that form, pass the JSON array as a bare positional payload instead.

Operation Groups

Wallet Identity

  • get:/v1/wallet/{wallet}/identity
  • post:/v1/wallet/batch-identity
  • get:/v1/wallet/{wallet}/funded-by

Wallet Activity

  • get:/v1/wallet/{wallet}/balances
  • get:/v1/wallet/{wallet}/history
  • get:/v1/wallet/{wallet}/transfers

Guardrails

  • Keep automation on the JSON output envelope; do not use --text.
  • Parse stable fields first: ok, kind, protocol, data, error.
  • Treat this v1 skill as read-only. Do not imply RPC write methods, transaction sending, or webhooks.
  • Helius labels the Wallet API as beta. Expect response shape drift and keep parsers focused on stable fields.
  • Start with small limit values before paginating large histories or transfer crawls.
  • Identity and funded-by lookups can return 404-style misses for unknown wallets; treat that as a data absence case before assuming auth failure.
  • helius-openapi-cli \x3Coperation> ... is equivalent to uxc https://api.helius.xyz --schema-url \x3Chelius_openapi_schema> \x3Coperation> ....

References

安全使用建议
This skill otherwise looks coherent as a read-only Helius Wallet API helper, but before installing: (1) verify the skill's source/trustworthiness since homepage/source are unknown; (2) expect to have the 'uxc' CLI on PATH — the SKILL.md requires it even though metadata doesn't list it; (3) prepare a Helius API key (HELIUS_API_KEY) and bind it with uxc as shown — the metadata omission is likely an oversight but confirm you only grant a key scoped to read operations if possible; (4) review the included OpenAPI schema (references/helius-wallet.openapi.json) and the validate.sh script locally (it needs jq and rg) so you understand what the skill will call; (5) prefer using the bundled local schema rather than fetching the raw GitHub URL if you want to avoid remote schema fetches; and (6) if you plan to allow autonomous agent invocation, enforce agent policies limiting network calls or credential use since the skill will perform real network reads to api.helius.xyz.
功能分析
Type: OpenClaw Skill Name: helius-openapi-skill Version: 1.0.0 The skill bundle is a well-structured integration for the Helius Wallet API, designed to perform read-only blockchain data lookups (identity, balances, history) via the 'uxc' utility. It follows standard patterns for API key management, includes a comprehensive OpenAPI schema (helius-wallet.openapi.json), and provides a validation script (validate.sh) to ensure structural integrity; no indicators of data exfiltration, malicious execution, or harmful prompt injection were found.
能力评估
Purpose & Capability
The skill's description and SKILL.md clearly rely on the 'uxc' CLI and an API key for api.helius.xyz (HELIUS_API_KEY). However the registry metadata lists no required binaries and no required environment variables or primary credential — a mismatch between what the skill needs to operate and what the metadata declares.
Instruction Scope
SKILL.md limits actions to read-only Helius Wallet API endpoints, prescribes X-Api-Key header auth, and includes guardrails to avoid writes. It references a curated OpenAPI schema (both as a local file and a raw GitHub URL). No instructions ask the agent to read unrelated system files or exfiltrate data beyond the Helius endpoints.
Install Mechanism
There is no install spec (instruction-only), which reduces risk. The repo includes a validation script that requires jq and rg; those are development-time checks and not declared in metadata. No downloads or archive extraction are present.
Credentials
The SKILL.md explicitly instructs setting HELIUS_API_KEY via uxc credential binding, but the skill metadata does not declare any required environment variables or a primary credential. Requesting an API key for Helius is proportional to the stated purpose, but the omission in metadata is a notable inconsistency and could lead to surprise when the skill tries to use credentials.
Persistence & Privilege
The skill is not always:true, does not request persistent system-wide privileges, and does not modify other skills. Autonomous invocation remains enabled (platform default) but there are no added persistence flags or privilege escalations in the files reviewed.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install helius-openapi-skill
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /helius-openapi-skill 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of helius-openapi-skill. - Enables read-only access to Helius Wallet API endpoints via UXC and a curated OpenAPI schema. - Standardizes API-key authentication using the X-Api-Key header with uxc credential and binding setup. - Supports wallet identity, batch identity, balances, history, transfers, and funding source lookups. - Emphasizes read-first and identity-safe operational guardrails; prohibits transaction submissions and webhook setups. - Documents workflow for schema inspection, command line invocations, and guidance on automation best practices.
元数据
Slug helius-openapi-skill
版本 1.0.0
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 1
常见问题

Helius Openapi Skill 是什么?

Operate Helius Wallet API reads through UXC with a curated OpenAPI schema, API-key auth, and read-first guardrails. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 214 次。

如何安装 Helius Openapi Skill?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install helius-openapi-skill」即可一键安装,无需额外配置。

Helius Openapi Skill 是免费的吗?

是的,Helius Openapi Skill 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Helius Openapi Skill 支持哪些平台?

Helius Openapi Skill 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Helius Openapi Skill?

由 jolestar(@jolestar)开发并维护,当前版本 v1.0.0。

💬 留言讨论