← 返回 Skills 市场
UnifAI
作者
Yilun Zhang
· GitHub ↗
· v1.0.4
· MIT-0
474
总下载
0
收藏
0
当前安装
7
版本数
在 OpenClaw 中安装
/install unifai
功能描述
A CLI for searching and invoking services on the UnifAI network. Supports 40+ services across DeFi, token data, social media, web search, news, travel, sport...
安全使用建议
This skill appears to do what it says: a CLI that finds and invokes network services, optionally signing blockchain transactions. Before installing: (1) verify the npm package and GitHub repository ownership/reputation; prefer npx if you don't want a global install; (2) do NOT put your private keys (SOLANA_PRIVATE_KEY, EVM_PRIVATE_KEY) in environment variables unless you trust the package and understand the risk — any process that can invoke the CLI (including autonomous agents) could sign transactions with those keys; (3) restrict RPC URLs to trusted providers and consider rate limits; (4) test with non‑funded keys or a testnet first. If you need higher assurance, review the unifai-sdk source code on GitHub and inspect the package before running it.
功能分析
Type: OpenClaw Skill
Name: unifai
Version: 1.0.4
The skill provides a CLI for the UnifAI network, enabling an agent to interact with 40+ services including DeFi, social media, and web search. It requires highly sensitive environment variables, specifically 'SOLANA_PRIVATE_KEY' and 'EVM_PRIVATE_KEY', for local transaction signing. While the behavior is aligned with its stated purpose as a blockchain-enabled service invoker and tool access is restricted to the 'unifai' binary, the requirement for raw private keys and the broad scope of financial capabilities represent high-risk behaviors (SKILL.md, _meta.json).
能力评估
Purpose & Capability
Name/description (UnifAI CLI for discovering/invoking services) match the declared binary (unifai), required API key (UNIFAI_AGENT_API_KEY), and optional signing keys/RPCs. The npm package install (unifai-sdk) is a reasonable way to provide the CLI binary.
Instruction Scope
SKILL.md instructs the agent to search then invoke via the unifai CLI and documents when signing is needed. It does not instruct the agent to read unrelated system files or exfiltrate data. It explicitly uses environment variables for keys and RPCs and warns to always inspect payload schemas before invoking.
Install Mechanism
Install uses the npm package 'unifai-sdk' to create the 'unifai' binary. This is an expected mechanism for a Node.js CLI, but npm packages are third‑party code—verify the package's authorship and audit the package if you don't trust the publisher. Using 'npx' avoids a global install.
Credentials
Only UNIFAI_AGENT_API_KEY is required which fits the described network API usage. The optional environment variables (SOLANA_PRIVATE_KEY, EVM_PRIVATE_KEY, RPC URLs) are justified for local transaction signing and RPC overrides, but they are highly sensitive — supplying private keys grants the CLI (and any agent that can invoke it) the ability to sign and submit on‑chain transactions.
Persistence & Privilege
always:false and no required config paths or system modifications are requested. The skill does not request permanent/system‑wide privileges. Autonomous invocation is allowed by default, which is normal; the skill does not elevate privileges beyond its own CLI usage.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install unifai - 安装完成后，直接呼叫该 Skill 的名称或使用
/unifai触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.4
- Added a "metadata" section describing environment and installation requirements.
- Removed author, license, and repository fields from SKILL.md.
- No changes to CLI usage, commands, or functionality.
v1.0.3
**Changelog for unifai v1.0.3**
- Added metadata fields: author, license, homepage, and repository to SKILL.md for improved attribution and discoverability.
- Updated allowed-tools to require the local unifai binary only (removed Bash(npx…) usage).
- Clarified installation instructions to prefer global installation, and provided updated npx guidance.
- Enhanced security documentation, including a new “Security Notes” section highlighting local signing and private key usage.
- Updated version to "1.0.3" in SKILL.md.
v1.0.2
- Expanded the skill description to highlight support for 40+ services including DeFi, token data, social media, news, travel, sports, and more.
- Added a new "What it does" section summarizing search, invocation, and configuration capabilities.
- Listed available service categories and specific supported protocols/tools for improved discoverability.
- Kept all commands, workflows, and examples unchanged for continuity.
- No code or interface changes; documentation update only.
v1.0.1
- Added documentation for optional environment variables in SKILL.md (private keys and RPC URLs).
- Clarified that public RPC URL defaults are provided but can be overridden.
- Explained that all transaction signing occurs locally and referenced the open-source CLI code.
- Improved error explanation for missing RPC URLs, noting public defaults and override capability.
- No changes to core CLI usage or command syntax.
v1.0.0
**unifai 1.0.0 — Initial Public Release**
- Adds UnifAI CLI skill for searching, invoking, and signing blockchain transactions from the command line.
- Supports both `npx` and global `npm` installation for zero-install or persistent usage.
- Requires `UNIFAI_AGENT_API_KEY` for authentication; supports config file setup.
- Enables JSON-first search for tools, always returning payload schemas (field names, required fields, types).
- Provides local transaction signing via `--sign` flag using locally stored private keys and standard RPC URLs.
- Emphasizes critical agent workflow: always search before invoke, follow the payload schema—do not guess field names.
v0.1.2-1
- Added a dedicated Security Model section, clarifying that private keys are never sent to the API and on-chain actions require explicit user signing.
- Documented the separation between read-only and transactional actions for improved user clarity.
- No changes to CLI functionality; documentation updated only.
- Minor formatting and heading adjustments for readability.
v0.1.2
- Added detailed SKILL.md documenting Unifai CLI usage, configuration, service categories, and advanced options.
- Expanded coverage of supported services: DeFi, token data, social media, web search, news, travel, sports, and utilities.
- Described installation (with Homebrew) and authentication methods with clear API key priority.
- Provided extensive usage examples for searching and invoking services, including payload and output formats.
- Included troubleshooting tips, configuration file examples, and links to resources.
元数据
常见问题
UnifAI 是什么？
A CLI for searching and invoking services on the UnifAI network. Supports 40+ services across DeFi, token data, social media, web search, news, travel, sport... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 474 次。
如何安装 UnifAI？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install unifai」即可一键安装，无需额外配置。
UnifAI 是免费的吗？
是的，UnifAI 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
UnifAI 支持哪些平台？
UnifAI 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 UnifAI？
由 Yilun Zhang（@yilunzhang）开发并维护，当前版本 v1.0.4。
推荐 Skills