DefiLlama Prices OpenAPI Skill
v1.0.0Operate DefiLlama public price APIs through UXC with a curated OpenAPI schema and read-first guardrails.
⭐ 0· 157·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description match the requested actions. The skill only targets coins.llama.fi and the included OpenAPI schema, and the only runtime prerequisite is the uxc tool (documented). The included validate.sh is a repo validation helper (dev-time), not part of runtime behavior.
Instruction Scope
SKILL.md instructs only read operations against /prices/current/{coins}, uses a fixed schema URL, and explicitly states read-only guardrails. It does require network access to coins.llama.fi and raw.githubusercontent.com to fetch schema and call the API, and it reuses the uxc skill for execution/error handling (so trust in uxc matters).
Install Mechanism
No install spec — instruction-only skill — so nothing is written to disk or downloaded by the platform. The only script included (scripts/validate.sh) is for local validation and depends on jq and ripgrep if you run it; it is not automatically executed on install.
Credentials
The skill requests no environment variables or credentials, which is appropriate. Note: it delegates execution to the uxc skill/tool; if your uxc installation or 'uxc' skill has credential management or additional permissions, review those separately because they could broaden the effective privileges.
Persistence & Privilege
always:false and default model invocation settings are used (agent may invoke autonomously, which is normal). The skill does not request persistent or system-wide configuration changes and does not modify other skills.
Assessment
This skill appears to do exactly what it says: perform read-only price queries against the public DefiLlama endpoint using uxc and a curated OpenAPI schema. Before installing: (1) ensure you trust the 'uxc' tool/skill on your agent because this skill delegates execution to it; (2) confirm you are comfortable allowing network calls to https://coins.llama.fi and https://raw.githubusercontent.com (these endpoints are required to fetch data and the schema); (3) inspect the referenced schema URL in the GitHub repo to ensure it matches expectations; (4) if you plan to run the provided validate.sh locally, have jq and ripgrep (rg) available and review the script; (5) if you want to limit risk, disable autonomous invocation for this skill or restrict who/what can call it. Do not provide any private keys or credentials to this skill (none are required).Like a lobster shell, security has layers — review code before you run it.
latestvk975bx84xsy0nck8h77yjbck8x83338f
License
MIT-0
Free to use, modify, and redistribute. No attribution required.