← Back to Skills Marketplace

Alchemy

Name: Alchemy
Author: aiwithabidi

by aiwithabidi · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

651

Downloads

Stars

Active Installs

Versions

Install in OpenClaw

/install alchemy

Description

Alchemy — blockchain data, NFTs, token balances, transactions, gas prices, and webhooks.

README (SKILL.md)

⛓️ Alchemy

Alchemy — blockchain data, NFTs, token balances, transactions, gas prices, and webhooks.

Requirements

Variable	Required	Description
`ALCHEMY_API_KEY`	✅	Alchemy API key

Quick Start

# Get ETH balance
python3 {{baseDir}}/scripts/alchemy.py get-balance --address \x3Cvalue>

# Get ERC-20 token balances
python3 {{baseDir}}/scripts/alchemy.py get-token-balances --address \x3Cvalue>

# Get transaction by hash
python3 {{baseDir}}/scripts/alchemy.py get-transaction --hash \x3Cvalue>

# Get block by number
python3 {{baseDir}}/scripts/alchemy.py get-block --block "latest"

# Get NFTs for address
python3 {{baseDir}}/scripts/alchemy.py get-nfts --address \x3Cvalue>

# Get NFT metadata
python3 {{baseDir}}/scripts/alchemy.py get-nft-metadata --contract \x3Cvalue> --token-id \x3Cvalue>

# Get token metadata
python3 {{baseDir}}/scripts/alchemy.py get-token-metadata --contract \x3Cvalue>

# Get current gas price
python3 {{baseDir}}/scripts/alchemy.py get-gas-price

# Get latest block number
python3 {{baseDir}}/scripts/alchemy.py get-block-number

# Get event logs
python3 {{baseDir}}/scripts/alchemy.py get-logs --address \x3Cvalue> --from-block "0x0" --to-block "latest" --topics \x3Cvalue>

# Get asset transfers for address
python3 {{baseDir}}/scripts/alchemy.py get-asset-transfers --address \x3Cvalue> --category "external,erc20"

# Get NFT floor price
python3 {{baseDir}}/scripts/alchemy.py get-floor-price --contract \x3Cvalue>

Output Format

All commands output JSON by default.

Script Reference

Script	Description
`{baseDir}/scripts/alchemy.py`	Main CLI — all commands in one tool

Credits

Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.

📅 Need help setting up OpenClaw for your business? Book a free consultation

Usage Guidance

This skill appears to be what it claims: a small Python CLI that calls the Alchemy API and needs an ALCHEMY_API_KEY. Before installing, confirm you will provide a dedicated Alchemy API key (least privilege if possible). Be aware the script will, if the env var is not set, attempt to read a .env file under WORKSPACE or ~/.openclaw/workspace/.env to find the key — if you keep multiple secrets in that file, consider moving or isolating them. Review the script yourself if you want to check exact endpoints/parameters (there are a few minor bugs in string placeholders, but nothing that indicates malicious behavior). If you proceed, monitor and be ready to rotate the API key if you suspect leakage.

Capability Analysis

Type: OpenClaw Skill Name: alchemy Version: 1.0.0 The skill is classified as suspicious due to a URL injection vulnerability in `scripts/alchemy.py`. User-supplied arguments for `address`, `contract`, and `token_id` are directly concatenated into URL paths using string replacement for GET requests (e.g., `cmd_get_nfts`, `cmd_get_nft_metadata`, `cmd_get_floor_price`). This lack of proper URL encoding or sanitization could allow an attacker to inject additional query parameters or manipulate the API request if they can control the input values, potentially leading to unexpected API behavior or information disclosure. While the script's core functionality is legitimate and there's no evidence of intentional malicious behavior like data exfiltration to unauthorized endpoints or persistence mechanisms, this vulnerability represents a significant security flaw.

Capability Assessment

✓ Purpose & Capability

Name/description, SKILL.md, and the included Python CLI consistently target Alchemy blockchain APIs and request a single ALCHEMY_API_KEY credential. The operations implemented (balances, NFTs, transactions, logs, gas, etc.) match the stated purpose.

ℹ Instruction Scope

SKILL.md instructs the agent to run the bundled Python CLI and only declares ALCHEMY_API_KEY. The CLI will try to read the requested variable from the environment and, if missing, will look up a .env file under WORKSPACE or the default ~/.openclaw/workspace/.env. That file-read behavior is not documented in SKILL.md and is an implementation detail you may want to know about.

✓ Install Mechanism

This is instruction-only with no install spec; the skill ships a single Python script relying only on the stdlib. No external downloads or package installs are requested.

ℹ Credentials

Only ALCHEMY_API_KEY is required (declared as primaryEnv), which is proportionate for an Alchemy integration. However, the script also checks WORKSPACE (an undeclared env var) to locate a .env file and may read that file to obtain the key; this could expose where you keep other keys if you re-use a workspace .env file, so be cautious where secrets are stored.

✓ Persistence & Privilege

The skill does not request always:true, does not modify system-wide configs, and has no install step that persists additional components. Autonomous invocation is allowed by default (normal for skills) but not coupled with elevated persistence.

How to Use

Make sure OpenClaw is installed (local or Docker)
Run the install command in chat: /install alchemy
After installation, invoke the skill by name or use /alchemy
Provide required inputs per the skill's parameter spec and get structured output

Version History

v1.0.0

Initial release of alchemy skill: - Provides blockchain data access: NFTs, token balances, transactions, gas prices, and webhooks via Alchemy. - Single CLI script offering multiple commands for common blockchain queries. - Outputs data in JSON format. - Requires only an Alchemy API key (no external dependencies). - Compatible with Python 3.10+.

Metadata

Slug alchemy

Version 1.0.0

License —

All-time Installs 0

Active Installs 0

Total Versions 1

Frequently Asked Questions

What is Alchemy?

Alchemy — blockchain data, NFTs, token balances, transactions, gas prices, and webhooks. It is an AI Agent Skill for Claude Code / OpenClaw, with 651 downloads so far.

How do I install Alchemy?

Run "/install alchemy" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Alchemy free?

Yes, Alchemy is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Alchemy support?

Alchemy is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Alchemy?

It is built and maintained by aiwithabidi (@aiwithabidi); the current version is v1.0.0.

More Skills