← 返回 Skills 市场
478
总下载
1
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install moralis-streams-api
功能描述
Real-time blockchain event monitoring with webhooks. Use when user asks about setting up webhooks, real-time event streaming, monitoring wallet addresses, tr...
安全使用建议
This skill is coherent and appears to implement Moralis Streams documentation via curl calls. Before installing: 1) Confirm you trust the source (owner ID is non-human) by checking the linked GitHub repo/docs URL independently; 2) Keep your MORALIS_API_KEY secret—do not paste it into chat; place it in a local .env and add .env to .gitignore as the docs advise; 3) Verify webhook endpoints you configure accept and quickly return 2xx and implement signature verification (x-signature) as documented; 4) Be careful with 'allAddresses' streams—they can generate very large volumes and cost more; and 5) If you need stronger assurance, review the referenced GitHub repository and Moralis official docs to confirm nothing has been altered.
功能分析
Type: OpenClaw Skill
Name: moralis-streams-api
Version: 1.2.1
The skill is designed for legitimate interaction with the Moralis Streams API, providing extensive documentation and `curl` examples for blockchain event monitoring. However, it is classified as 'suspicious' due to the broad `Bash` permission in `SKILL.md` and the direct use of `curl` commands with string interpolation for API parameters. While the provided examples target the legitimate Moralis API and the documentation advises secure API key handling, the inherent risk of command injection exists if the AI agent's input sanitization for user-provided parameters (e.g., `description`, `tag`, or `webhookUrl` if it were directly executed) is not robust. This represents a potential vulnerability (RCE risk) rather than clear evidence of intentional malicious behavior.
能力评估
Purpose & Capability
Name/description match the requested inputs: the skill is about creating/reading/updating Streams webhooks and only requires curl and a MORALIS_API_KEY. The declared primary credential (MORALIS_API_KEY) and required binary (curl) are appropriate and proportional.
Instruction Scope
SKILL.md is a docs-heavy, step-by-step instruction set that only tells the agent to use the Streams API endpoints and to check the MORALIS_API_KEY environment variable. It explicitly warns not to ask users to paste API keys into chat and gives safe guidance for local .env discovery. It does not instruct reading unrelated files, exfiltrating data, or calling unknown endpoints.
Install Mechanism
No install spec and no code files — instruction-only. This is lowest-risk: nothing is downloaded or written by the skill beyond suggested local .env creation steps that are user-driven.
Credentials
Only one env var is required (MORALIS_API_KEY) and it is the expected credential for calling the Moralis Streams API. The SKILL.md only references this env var and no unrelated secrets or config paths.
Persistence & Privilege
The skill is not always-enabled and does not request elevated persistence. It does not modify other skills or system-wide settings. Autonomous invocation is allowed by default but is not combined with other concerning privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install moralis-streams-api - 安装完成后，直接呼叫该 Skill 的名称或使用
/moralis-streams-api触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.2.1
**Added project homepage and repository links to skill metadata.**
- Introduced `homepage` and `repository` fields in the metadata section for direct access to documentation and source code.
- No functional/API changes. All core usage and instructions remain unchanged.
v1.2.0
Version 1.2.0
- Added detailed documentation on delivery guarantees, error handling, and triggers (see new references folder files).
- Expanded explanation of stream status values to include error and terminated states.
- Documented new and critical auto-termination behavior for erroring streams.
- Added references for configuring native balances and using read-only triggers in webhooks.
- Updated common pitfalls section with new requirements about 200 response for test webhooks and unrecoverable states.
- Improved quick reference sections with richer configuration and troubleshooting guidance.
v0.1.0
Initial release: real-time blockchain event monitoring API for EVM chains
- Provides webhook-based monitoring for wallet activity, token/NFT transfers, and contract events in real-time.
- Supports creation, update, deletion, and address management for streams via the Moralis Streams API.
- Enforces correct HTTP methods (PUT for create, POST for update, DELETE for delete streams).
- Requires a valid MORALIS_API_KEY in the environment; does not support in-chat key entry.
- Extensive guidance on common mistakes and correct usage patterns (stream IDs, chain IDs, status values).
- Includes a catalog of all 20 available Streams API endpoints for streamlined discovery.
元数据
常见问题
Moralis Streams Api 是什么？
Real-time blockchain event monitoring with webhooks. Use when user asks about setting up webhooks, real-time event streaming, monitoring wallet addresses, tr... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 478 次。
如何安装 Moralis Streams Api？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install moralis-streams-api」即可一键安装，无需额外配置。
Moralis Streams Api 是免费的吗？
是的，Moralis Streams Api 完全免费（开源免费），可自由下载、安装和使用。
Moralis Streams Api 支持哪些平台？
Moralis Streams Api 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Moralis Streams Api？
由 novnski（@novnski）开发并维护，当前版本 v1.2.1。
推荐 Skills