Mobula - Crypto Market Data & Wallet Intelligence

PassAudited by ClawScan on May 1, 2026.

Overview

The skill appears aligned with crypto market and wallet lookup use, with user-visible notes about needing a Mobula API key and sending wallet or token queries to Mobula.

This looks safe to install for market-data and wallet-analytics use, as long as you are comfortable using a Mobula API key and sending wallet addresses or token queries to Mobula. Do not provide seed phrases, private keys, exchange trading keys, or unrelated credentials.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

You may need to provide a Mobula API key before the skill works, and that key could be used to make requests to Mobula under your account or quota.

Why it was flagged

The skill requires a Mobula service credential. This is purpose-aligned for an API-backed market data integration, but users should recognize that the registry summary separately lists no required environment variables.

Skill content
Requires free API key from mobula.io. ... requiredEnvVars:\n  - MOBULA_API_KEY
Recommendation

Use a dedicated Mobula API key if possible, rotate it if exposed, and do not provide unrelated wallet seed phrases, exchange keys, or trading credentials.

What this means

Wallet addresses, ENS names, and token queries you ask about may be visible to Mobula and could relate to personal or business financial activity.

Why it was flagged

The skill sends wallet identifiers or ENS names to an external Mobula API to retrieve cross-chain portfolio data. That data flow is disclosed and purpose-aligned, but wallet lookups can reveal financial-context interests.

Skill content
Endpoint: `GET https://api.mobula.io/api/1/wallet/portfolio` ... `wallet` (required): Wallet address ... Default: all chains
Recommendation

Only query wallet addresses and tokens you are comfortable sending to Mobula, and review Mobula's privacy and API terms if the addresses are sensitive.