Moralis
v1.0.0Moralis — Web3 data, token prices, wallet history, NFTs, DeFi positions, and blockchain events.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the implementation: the included CLI issues HTTP requests to Moralis API endpoints to fetch balances, tokens, NFTs, etc. The only required credential is MORALIS_API_KEY, which is appropriate for this purpose.
Instruction Scope
The SKILL.md shows only CLI usage and JSON output. The runtime script, however, will try to read MORALIS_API_KEY from the environment and — if missing — will look for a .env file under WORKSPACE or ~/.openclaw/workspace. That file lookup is a limited fallback (it only searches for a line beginning with 'MORALIS_API_KEY='), but it is additional file-system access not called out in the docs.
Install Mechanism
This is an instruction-only skill with a bundled Python script and no install spec. Nothing is downloaded or executed during install; runtime behavior is limited to a local Python script making HTTPS calls.
Credentials
Declared requirements ask only for MORALIS_API_KEY (primary credential), which matches usage. The script also references WORKSPACE (optional) and expands the home directory to find a .env file as a fallback; these are not required but grant the script limited ability to read a specific .env file if the key isn't set in environment.
Persistence & Privilege
The skill does not request persistent/always-on privileges (always:false). It does not attempt to modify other skills or agent configs; no elevated or persistent system-level privileges are requested.
Assessment
This skill appears to do what it says: a local Python CLI that calls Moralis endpoints and requires only MORALIS_API_KEY. Before installing, consider: (1) the included script will perform HTTPS requests to deep-index.moralis.io using your API key — ensure you're comfortable providing that key; (2) if MORALIS_API_KEY is not set in env, the script will look for a .env file in WORKSPACE or ~/.openclaw/workspace and extract MORALIS_API_KEY from it — if you keep sensitive keys in .env files, be aware this code will read that file; (3) review the small bugs/typos (e.g., NFT metadata token-id replacement) if you depend on that command; (4) test the script in an isolated environment if you want to confirm behavior before wider use.Like a lobster shell, security has layers — review code before you run it.
Runtime requirements
🌐 Clawdis
EnvMORALIS_API_KEY
Primary envMORALIS_API_KEY
latest
🌐 Moralis
Moralis — Web3 data, token prices, wallet history, NFTs, DeFi positions, and blockchain events.
Requirements
| Variable | Required | Description |
|---|---|---|
MORALIS_API_KEY | ✅ | Moralis API key |
Quick Start
# Get native balance
python3 {{baseDir}}/scripts/moralis.py get-native-balance --address <value> --chain "eth"
# Get ERC-20 token balances
python3 {{baseDir}}/scripts/moralis.py get-token-balances --address <value> --chain "eth"
# Get wallet transactions
python3 {{baseDir}}/scripts/moralis.py get-transactions --address <value> --chain "eth"
# Get token price
python3 {{baseDir}}/scripts/moralis.py get-token-price --address <value> --chain "eth"
# Get NFTs for wallet
python3 {{baseDir}}/scripts/moralis.py get-nfts --address <value> --chain "eth"
# Get NFT metadata
python3 {{baseDir}}/scripts/moralis.py get-nft-metadata --address <value> --token-id <value> --chain "eth"
# Get NFT transfers
python3 {{baseDir}}/scripts/moralis.py get-nft-transfers --address <value> --chain "eth"
# Get token transfers
python3 {{baseDir}}/scripts/moralis.py get-token-transfers --address <value> --chain "eth"
# Get DeFi positions
python3 {{baseDir}}/scripts/moralis.py get-defi-positions --address <value> --chain "eth"
# Resolve ENS/Unstoppable domain
python3 {{baseDir}}/scripts/moralis.py resolve-domain --domain <value>
# Search token by symbol
python3 {{baseDir}}/scripts/moralis.py search-token --symbol <value>
# Get block details
python3 {{baseDir}}/scripts/moralis.py get-block --block <value> --chain "eth"
Output Format
All commands output JSON by default.
Script Reference
| Script | Description |
|---|---|
{baseDir}/scripts/moralis.py | Main CLI — all commands in one tool |
Credits
Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.
📅 Need help setting up OpenClaw for your business? Book a free consultation
Comments
Loading comments...
