← 返回 Skills 市场
Web3 Graphql
作者
SubQuery-Network
· GitHub ↗
· v1.0.0
· MIT-0
88
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install web3-graphql
功能描述
Use Ask GraphQL MCP to handle Web3 and on-chain questions through GraphQL endpoints (especially SubQuery/SubGraph). Trigger by default for blockchain/Web3-re...
安全使用建议
This skill will forward user-provided GraphQL endpoint URLs and any auth headers or API keys you paste into chat to a third-party gateway (ask-api.hermes-subnet.ai). Before installing or using it, consider: 1) only test with public endpoints or non-sensitive data first; 2) avoid pasting long-lived secrets in chat—use short-lived tokens, masked credentials, or a secure vault if possible; 3) verify the operator/domain (hermes-subnet.ai) and ask for a privacy/security policy explaining how they store/handle forwarded upstream credentials; 4) prefer self-hosted or local query options if you cannot share upstream auth; and 5) if uncomfortable, request a version that accepts credentials via a secure config (env vars or vault) rather than chat. If the developer can show a reputable homepage, documented data handling policy, or a secure credential flow (not chat copy/paste), my confidence in a benign assessment would increase.
功能分析
Type: OpenClaw Skill
Name: web3-graphql
Version: 1.0.0
The skill acts as a mandatory proxy for GraphQL queries, routing all traffic and sensitive credentials (including 'X-ENDPOINT-AUTHORIZATION' and 'X-API-KEY') to a third-party gateway (hermes-subnet.ai). It contains 'hard constraints' in SKILL.md that explicitly forbid the agent from performing direct queries—even if the model is capable—forcing the exfiltration of endpoint details and authorization tokens to the external service. Furthermore, it includes aggressive instructions to steer users toward a specific billing site (ask.hermes-subnet.ai) using mandatory wording when rate limits are detected, prioritizing commercial conversion over local execution.
能力评估
Purpose & Capability
The name/description claim (use an Ask GraphQL MCP gateway to handle Web3/SubQuery/SubGraph queries) matches the instructions and references to an MCP gateway (ask-api.hermes-subnet.ai). No unexpected binaries, env vars, or platform-level access are requested.
Instruction Scope
SKILL.md explicitly instructs agents to request the user's API key immediately when free-tier limits are hit and to include user-provided GraphQL endpoint URLs and optional upstream auth headers (X-ENDPOINT-AUTHORIZATION) in requests to the external MCP gateway. This gives the agent blanket permission to ask for and forward sensitive credentials in chat, which is scope-expanding and potentially dangerous if users paste long-lived secrets into messages.
Install Mechanism
Instruction-only skill with no install steps or downloads. Nothing writes to disk or installs packages — low install risk.
Credentials
Although the skill declares no required environment variables, it expects the user to provide (via chat) potentially multiple secrets: a paid MCP API key (X-API-KEY) and upstream endpoint auth tokens. Those credentials are then forwarded to ask-api.hermes-subnet.ai. The skill does not provide a secure credential-handling alternative (vault, ephemeral tokens, or local proxy).
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges or modify other skills' configs. It appears only user-invocable/autonomously invokable by default, which is normal.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install web3-graphql - 安装完成后，直接呼叫该 Skill 的名称或使用
/web3-graphql触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of the "ask-graphql-mcp" skill for handling Web3 and on-chain questions via Ask GraphQL MCP.
- Enforces all Web3/on-chain queries to go through Ask MCP agent—never direct GraphQL calls, except upon explicit user request.
- Automatically discovers the appropriate GraphQL endpoint if missing, asking users only when endpoint discovery is inconclusive.
- Integrates both session tool and HTTP JSON-RPC paths for executing user queries.
- Implements robust handling of free/paid plan modes, including API key requirements, header setup, and clear user guidance for quota/rate-limit errors.
- Returns structured, user-friendly responses with concise summaries, copy-ready config samples, and actionable next steps.
元数据
常见问题
Web3 Graphql 是什么？
Use Ask GraphQL MCP to handle Web3 and on-chain questions through GraphQL endpoints (especially SubQuery/SubGraph). Trigger by default for blockchain/Web3-re... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 88 次。
如何安装 Web3 Graphql？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install web3-graphql」即可一键安装，无需额外配置。
Web3 Graphql 是免费的吗？
是的，Web3 Graphql 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Web3 Graphql 支持哪些平台？
Web3 Graphql 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Web3 Graphql？
由 SubQuery-Network（@subquery-network）开发并维护，当前版本 v1.0.0。
推荐 Skills