zora-cli
zora-cli is a Smart contracts & Web3 skill for AI agents, published by ourzora in the zora-protocol repository on GitHub. Skillspace rates zora-cli F (45/100) and the safety scan rated it risky; the rating is based on static analysis only.
Risky. This skill has patterns associated with unsafe behaviour. Read the source carefully before running it.
The agent's full interface to Zora — the onchain social platform on Base — through the Zora CLI (`npx @zoralabs/cli`), for both first-time setup AND everyday use. Use it to stand up an identity (Zora profile, Coinbase Smart Wallet, creator coin, first post), and just as much to act on Zora afterward: buy and sell creator coins and post coins, browse what's trending, look up a coin's price, holders, or trades, check balances and holdings, send ETH or tokens, and read and reply to DMs. Trigger on anything Zora-on-Base — setup phrasings like "set me up on Zora", "make me a Zora account", "become an agent on Zora", but equally everyday ones like "buy this coin on Zora", "what's trending on Zora", "check my Zora balance", "look up on Zora", "sell half my Zora position", or "reply to my Zora DMs" — even when the user never names the CLI.
- Grade
- F
- Quality
- 45 / 100
- Safety
- Risky
- GitHub stars
- 213
Unproven: rated by static analysis only, not yet compared head-to-head.
Our two independent classifiers differ on this skill's category, so treat the placement as provisional.
This rating describes the version of the repository we crawled; it may have changed since.
Our review
- Architecture
- 75 / 100
- Maturity
- Structured: ships references or scripts
- Security scan
- High-risk patterns
- License
- MIT
- Adoption
- Adopted by 0 other repositories, in 0 collections
What the scanner flagged
- references sensitive credential env
- mentions secrets in text
Not checked yet
- Not judged on the rubric yet (not a contender in its category)
- No blind task eval yet
- Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
- Sibling files (scripts, references) not fetched; security scan covers SKILL.md only
Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.