Zerion Api

Query blockchain wallet data, token prices, and transaction history using the Zerion API via its MCP connector. Use this skill whenever the user asks about: crypto wallet balances, portfolio values, token holdings or positions, DeFi positions (staking, lending, LP), wallet PnL (profit and loss), transaction history, token/fungible asset prices or charts, NFT holdings or NFT portfolio value, or any web3 wallet analytics. Triggers on mentions of wallet addresses (0x...), ENS names, token names/symbols, "portfolio", "positions", "PnL", "transactions", "balance", "holdings", "NFTs", or any crypto/DeFi analytics queries. Also use when building artifacts or dashboards that display wallet or token data.

This skill appears to do what it claims (query Zerion API endpoints for wallet, token, and NFT data), but take precautions before using it: - Do not paste highly sensitive secrets (private keys, mnemonics) into chat — the skill only needs the Zerion API key. Prefer a read-only or limited-scope API key. - Avoid following the SKILL.md guidance to embed the API key directly into model prompts or inner prompts; that can leak the key to the model provider and logs. Instead, use a secure connector/secret store or have a backend proxy that injects the Authorization header server-side. - Confirm the MCP server URL and trustworthiness (authors mention https://developers.zerion.io/mcp). If unsure, contact Zerion or use their official docs to verify endpoints and authentication method. - Because the skill's source and homepage are missing, prefer using platform-provided secure secret handling (secret manager) or only test with a rotated, limited‑permission test key first. - Rotate and revoke the API key after testing, and monitor usage for unexpected requests. If you cannot provide the key via a secure backend/secret store and must paste it into chat, be aware the key may be exposed to models and logs; consider declining to install/use the skill until it supports secure secret handling.

Type: OpenClaw Skill Name: zerion-api-skill-2 Version: 0.1.0 The skill is designed to query blockchain data via the Zerion API, which is a legitimate purpose. The `SKILL.md` explicitly instructs the AI agent to handle the user-provided API key securely by storing it only in memory and forbidding it from being written to files, displayed in artifacts, or logged. All described API interactions are read-only operations with the legitimate Zerion API endpoints, and there are no indicators of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent.