← 返回 Skills 市场
arein

Onchain Test

作者 arein · GitHub ↗ · v0.1.2
cross-platform ⚠ suspicious
1646
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install onchain-test
功能描述
CLI for crypto portfolio tracking, market data, and CEX history. Use when the user asks about crypto prices, wallet balances, portfolio values, Coinbase/Binance holdings, or Polymarket predictions.
使用说明 (SKILL.md)

Onchain CLI

CLI for crypto portfolio tracking, market data, and CEX history.

Invocation

onchain \x3Ccommand>

Commands

Market Data

onchain price \x3Ctoken>         # Token price (btc, eth, sol, etc.)
onchain markets               # Market overview with trending

Wallet Data

onchain balance [address]           # Token balances (auto-detects EVM/Solana)
onchain balance --chain polygon     # Filter by chain
onchain history [address]           # Transaction history
onchain portfolio [address]         # Full portfolio with DeFi positions

CEX Data

onchain coinbase balance      # Coinbase balances
onchain coinbase history      # Coinbase trade history
onchain binance balance       # Binance balances
onchain binance history       # Binance trade history

Prediction Markets

onchain polymarket trending          # Trending markets
onchain polymarket search \x3Cquery>    # Search markets
onchain polymarket view \x3Cslug>       # View market details

Configuration

onchain setup                 # Interactive setup wizard
onchain config                # View current config
onchain config wallet add \x3Cname> \x3Caddress>
onchain config wallet set-default \x3Cname>

Global Options

  • --json - Output as JSON (agent-friendly)
  • --plain - Disable colors and emoji
  • --timeout \x3Cms> - Request timeout

Configuration

Config file: ~/.config/onchain/config.json5

Required API Keys

Feature API Key Get Key
EVM wallets DEBANK_API_KEY DeBank
Solana wallets HELIUS_API_KEY Helius
Coinbase CEX COINBASE_API_KEY + COINBASE_API_SECRET Coinbase
Binance CEX BINANCE_API_KEY + BINANCE_API_SECRET Binance

Optional API Keys

Feature API Key Notes
Market data COINGECKO_API_KEY Free tier works, Pro for higher limits
Market fallback COINMARKETCAP_API_KEY Alternative market data source

Examples

Get Bitcoin price

onchain price btc

Check wallet balance

onchain balance 0x1234...5678

View portfolio with DeFi positions

onchain portfolio main  # Uses saved wallet named "main"

Get trending prediction markets

onchain polymarket trending -n 5

JSON output for scripts

onchain --json price eth | jq '.priceUsd'

Supported Chains

EVM (via DeBank)

Ethereum, BNB Chain, Polygon, Arbitrum, Optimism, Avalanche, Base, zkSync Era, Linea, Scroll, Blast, Mantle, Gnosis, Fantom, Celo, and more.

Solana (via Helius)

Full Solana mainnet support including SPL tokens and NFTs.

Agent Integration

This CLI is designed for agent use. Key patterns:

  1. Always use --json for programmatic access
  2. Check exit codes - 0 for success, 1 for error
  3. Use saved wallets - Configure once with onchain setup, reference by name
  4. Rate limiting - APIs have rate limits, add delays between rapid calls

Example Agent Usage

# Get portfolio value
VALUE=$(onchain --json portfolio main | jq -r '.totalValueUsd')

# Get price with change
onchain --json price btc | jq '{price: .priceUsd, change24h: .priceChange24h}'

# Check if market is bullish
CHANGE=$(onchain --json markets | jq '.marketCapChange24h')
安全使用建议
This skill appears to be a plausible crypto CLI, but there are red flags you should address before installing: 1) The registry metadata omits required install and credential info while the SKILL.md/README require multiple sensitive API keys — confirm the exact env var names and which keys are mandatory. 2) The README points to npm package @cyberdrk/onchain; verify the package's publisher, source repository, and reviews on npm/GitHub before running npm install or npx. 3) Give CEX API keys only minimal permissions (read/trade-only, no withdraw) and prefer read-only or limited-scope keys. 4) Inspect how the CLI stores secrets in ~/.config/onchain/config.json5 (is it plaintext?), and avoid storing long-lived secrets unencrypted. 5) If you plan to let an agent call this skill autonomously, consider limiting that agent's permissions or running the CLI in an isolated environment (container, VM). 6) Ask the publisher for source code or a homepage; lack of provenance + missing registry metadata increases risk. If you cannot verify the package/source, treat it as untrusted and avoid installing it on sensitive systems.
功能分析
Type: OpenClaw Skill Name: onchain-test Version: 0.1.2 The skill bundle is classified as benign. The `SKILL.md` and `README.md` files clearly describe a CLI tool for crypto portfolio tracking and CEX history. While the tool requires sensitive API keys (e.g., `DEBANK_API_KEY`, `COINBASE_API_SECRET`, `BINANCE_API_SECRET`) for its functionality, the instructions for the AI agent are explicit about their purpose and use, without any evidence of prompt injection attempts to misuse these keys, exfiltrate data, or perform unauthorized actions. All commands and configurations are aligned with the stated purpose of the tool, and there are no indicators of malicious execution, persistence, or obfuscation.
能力评估
Purpose & Capability
The described capabilities (wallet balances, CEX history, market data, Polymarket) legitimately require API keys and access to user wallet addresses; that matches the SKILL.md/README functionality. However the registry metadata lists no required env vars or install steps despite the CLI clearly needing API keys and an npm package, an inconsistency worth flagging.
Instruction Scope
SKILL.md stays within the stated purpose: it instructs the agent to run the onchain CLI, use --json, check exit codes, and read/write a config at ~/.config/onchain/config.json5. It does not instruct reading unrelated system files or exfiltrating data to unknown endpoints. It does, however, expect the agent to have or install the CLI binary.
Install Mechanism
No install spec is declared in the registry, but the README instructs installing @cyberdrk/onchain via npm or npx. That means executing third‑party code from the npm registry (source unknown to the registry entry) if the user follows the docs — a nontrivial risk because the skill metadata did not declare this and there is no provided provenance or homepage.
Credentials
SKILL.md/README list multiple sensitive credentials (DeBank, Helius, Coinbase, Binance API keys/secrets, etc.) which are proportionate to the CLI's features. However the registry metadata lists no required env vars and the SKILL.md and README use inconsistent env var names for some providers (e.g., Coinbase variable names differ). Requesting CEX API keys is expected for those features, but the omission and inconsistencies are suspicious and increase the chance of misconfiguration or accidental exposure.
Persistence & Privilege
The skill does not request permanent platform presence (always: false) and does not claim to modify other skills. It will store configuration and possibly API keys at ~/.config/onchain/config.json5 per its docs, which is normal for a CLI but means secrets will be stored on disk — users should verify how the CLI stores/encrypts those secrets before use.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install onchain-test
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /onchain-test 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.2
test
元数据
Slug onchain-test
版本 0.1.2
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Onchain Test 是什么?

CLI for crypto portfolio tracking, market data, and CEX history. Use when the user asks about crypto prices, wallet balances, portfolio values, Coinbase/Binance holdings, or Polymarket predictions. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1646 次。

如何安装 Onchain Test?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install onchain-test」即可一键安装,无需额外配置。

Onchain Test 是免费的吗?

是的,Onchain Test 完全免费(开源免费),可自由下载、安装和使用。

Onchain Test 支持哪些平台?

Onchain Test 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Onchain Test?

由 arein(@arein)开发并维护,当前版本 v0.1.2。

💬 留言讨论