← 返回 Skills 市场
202
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install nodit-openapi-skill
功能描述
Operate Nodit Web3 Data API reads through UXC with a curated OpenAPI schema, API-key auth, and overlap-aware guardrails.
安全使用建议
This skill appears to be a straightforward read-only integration for the Nodit Web3 Data API, but take these precautions before installing or providing secrets:
- Verify the source and origin: the skill's 'source' and homepage are unknown. Prefer skills published by known authors or official sources.
- Do not supply your Nodit API key until you are comfortable with the author and repo. SKILL.md expects you to store a secret in NODIT_API_KEY and register it with uxc, but the skill metadata does not declare that requirement—confirm the credential name and binding before use.
- Ensure you have uxc installed and understand what uxc auth bindings do; they can cause the CLI to attach credentials to matching hosts.
- If you plan to run the included sanity script (scripts/validate.sh), note it requires jq and ripgrep (rg). Those are development-time checks, not runtime behavior, but they are undeclared in the registry metadata.
- Network access to web3.nodit.io and raw.githubusercontent.com is required; be aware of where schemas and runtime calls go.
If you still want to proceed: (1) inspect the OpenAPI schema (references/nodit-web3.openapi.json) to confirm endpoints; (2) add/confirm the NODIT_API_KEY requirement in your environment only after you verify the publisher; (3) consider running the validation script locally to confirm file integrity, and restrict the API key to the minimum scope permitted by Nodit (if possible).
功能分析
Type: OpenClaw Skill
Name: nodit-openapi-skill
Version: 1.0.0
The skill is a well-structured integration for the Nodit Web3 Data API, focusing exclusively on read-only operations such as balance lookups and transaction history. It utilizes the 'uxc' utility for command execution and authentication, includes explicit guardrails for handling rate limits (HTTP 429), and provides a comprehensive OpenAPI schema (nodit-web3.openapi.json). No indicators of data exfiltration, malicious execution, or prompt injection were found.
能力评估
Purpose & Capability
The name, description, SKILL.md, and embedded OpenAPI schema all consistently describe a read-only Nodit Web3 Data API integration (entity lookup, balances, transactions, token metadata/prices). That purpose reasonably explains the included files and instructions. However, the registry metadata lists no required environment variables while the runtime instructions explicitly require a Nodit API key (NODIT_API_KEY) and network access; this mismatch should be corrected.
Instruction Scope
SKILL.md stays within scope: it instructs the agent to use the 'uxc' tooling, create a credential binding using an API key header (X-API-KEY), link a fixed CLI wrapper, and perform only read operations. It does not instruct the agent to read unrelated system files or exfiltrate arbitrary data. The instructions do require network access to web3.nodit.io and raw.githubusercontent.com for the schema URL, which is consistent with the stated workflow.
Install Mechanism
There is no install spec (instruction-only), so nothing is automatically downloaded or written by the skill. That is low-risk. The repository includes a validation script (scripts/validate.sh) that requires jq and ripgrep (rg) if you run it locally; those are not runtime installs but are undeclared dependencies in the metadata.
Credentials
The SKILL.md explicitly requires a Nodit API key and shows commands that rely on an environment variable (NODIT_API_KEY) and uxc auth bindings. Yet the registry metadata declares no required env vars or primary credential. This is a meaningful inconsistency: the skill needs a secret (NODIT_API_KEY) to operate correctly but that requirement is not surfaced in the metadata. Users should not provide an API key until they verify the provider and intent.
Persistence & Privilege
The skill does not request always:true and does not include any install-time hooks or modifications to other skills. It describes use of an external CLI (uxc) and suggests creating a linked CLI alias, but nothing in the files indicates it will persistently modify other skill configs or force-enable itself.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install nodit-openapi-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/nodit-openapi-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of nodit-openapi-skill, enabling read-only operations on the Nodit Web3 Data API via UXC and a curated OpenAPI schema.
- Provides support for multichain entity lookup, native balance lookup, account transaction history, token contract metadata lookup, and token price lookup by contracts.
- Implements API-key authentication using X-API-KEY header with credential guidance for uxc.
- Includes guardrails for API usage, error handling, and guidance on efficient query patterns and rate-limit responses.
- Documentation covers setup, usage workflow, available operations, and best practices for integrating Nodit’s multichain read endpoints.
元数据
常见问题
Nodit Openapi Skill 是什么？
Operate Nodit Web3 Data API reads through UXC with a curated OpenAPI schema, API-key auth, and overlap-aware guardrails. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 202 次。
如何安装 Nodit Openapi Skill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install nodit-openapi-skill」即可一键安装，无需额外配置。
Nodit Openapi Skill 是免费的吗？
是的，Nodit Openapi Skill 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Nodit Openapi Skill 支持哪些平台？
Nodit Openapi Skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Nodit Openapi Skill？
由 jolestar（@jolestar）开发并维护，当前版本 v1.0.0。
推荐 Skills