Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Fía Signals

v2.1.0

AI crypto market intelligence from Fía Signals. 65+ endpoints covering price predictions, technical analysis (RSI MACD EMA Bollinger), market sentiment, smar...

0· 387·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description promise (crypto market intelligence, many endpoints) matches the contained artifacts: SKILL.md, README, package.json and the shell script all call a Fía Signals API and expose free vs premium endpoints. There are minor copy inconsistencies (SKILL.md mentions '65+ endpoints' while README/package mention '56' and version strings vary), but these are documentation issues, not functional mismatches.
Instruction Scope
The runtime instructions and the shell script only perform HTTP GETs to the documented API base (api.fiasignals.com or x402.fiasignals.com) and print results. The script does not read local config files, environment variables, credentials, or hidden system paths; it does not exfiltrate data. Help/discovery output is limited to the API URLs and usage examples.
Install Mechanism
No install spec is present (instruction-only plus a small helper script). No downloads, no archive extraction, and no package manager installs. The README mentions curl/python3 as common prerequisites; the script relies only on curl which is typical and low risk.
Credentials
The skill declares no required environment variables, no primary credential, and the script does not access environment secrets. All network calls go to the API hosts documented in the SKILL.md/README. There are no requests for unrelated credentials or config paths.
Persistence & Privilege
The skill is not always-enabled, does not request elevated agent privileges, and does not modify other skills or global agent settings. It is a passive client that issues API requests when invoked.
Assessment
This skill appears to do exactly what it says: make HTTP requests to a Fía Signals API and print results. Before installing, verify the API hostname and origin (api.fiasignals.com / x402.fiasignals.com) and that you trust that service. Test free endpoints manually (curl the /preview or /health endpoints) to confirm behavior. Note documentation inconsistencies (endpoint counts, minor version mismatches) — these are likely harmless but worth checking. The skill does not request or store secrets, and premium endpoints indicate payment required (the script only prints a payment URL and does not automatically charge), but be cautious about an agent making repeated automated calls to premium endpoints if you enable autonomous invocation. If you need stronger assurance, ask the publisher for a canonical repository or TLS certificate details and confirm the contact address (fia-trading@agentmail.to).

Like a lobster shell, security has layers — review code before you run it.

latestvk973v0d9r437r8pq3zag4zeman8215t2

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Fía Signals — Crypto Market Intelligence

Real-time crypto data for AI agents. 56 endpoints. Free tier works instantly — no keys, no signup.

API Base URL

https://api.fiasignals.com

Free Endpoints (no auth, no payment)

EndpointDescription
/v1/gas/pricesMulti-chain gas prices (Ethereum, Base, Arbitrum, Polygon, Optimism)
/v1/gas/prices/{chain}Gas prices for a specific chain
/v1/gas/history/{chain}Gas price history
/v1/solana/trendingTop 20 trending Solana tokens with price, liquidity, volume
/v1/solana/stakingSolana staking rates and validator info
/v1/solana/top-walletsMost active Solana wallets
/v1/mev/botsKnown MEV bot addresses and activity
/v1/dd/quick/{symbol}Quick due diligence report for any crypto asset
/v1/research/topicsCurrent crypto research topics and papers
/v1/yield/ratesBest DeFi yield rates across protocols
/v1/healthAPI health check

Premium Endpoints (x402 USDC payment)

EndpointPriceDescription
/v1/solana/new-launches$0.005Newly launched Solana tokens
/v1/solana/new-pools$0.005New liquidity pools
/v1/solana/smart-money$0.01Smart money wallet tracking
/v1/solana/whales$0.01Whale movement alerts
/v1/solana/yields$0.005Solana-specific yield opportunities
/v1/mev/scan$0.01Full MEV risk scan for a transaction
/v1/audit/quick/{address}$0.05Quick smart contract risk assessment
/v1/audit/report$0.50Full smart contract audit report
/v1/wallet/risk$0.02Wallet risk scoring
/v1/wallet/profile/{address}$0.02Complete wallet profile and PnL

Usage

# Free — works immediately
~/.openclaw/workspace/skills/fia-signals-skill/scripts/fia_signals.sh gas
~/.openclaw/workspace/skills/fia-signals-skill/scripts/fia_signals.sh trending
~/.openclaw/workspace/skills/fia-signals-skill/scripts/fia_signals.sh yields
~/.openclaw/workspace/skills/fia-signals-skill/scripts/fia_signals.sh dd BTC
~/.openclaw/workspace/skills/fia-signals-skill/scripts/fia_signals.sh mev-bots
~/.openclaw/workspace/skills/fia-signals-skill/scripts/fia_signals.sh research
~/.openclaw/workspace/skills/fia-signals-skill/scripts/fia_signals.sh staking

# Premium — requires x402 USDC payment
~/.openclaw/workspace/skills/fia-signals-skill/scripts/fia_signals.sh whales
~/.openclaw/workspace/skills/fia-signals-skill/scripts/fia_signals.sh smart-money
~/.openclaw/workspace/skills/fia-signals-skill/scripts/fia_signals.sh new-launches
~/.openclaw/workspace/skills/fia-signals-skill/scripts/fia_signals.sh audit 0xContractAddress

Data Source

Live data from Fía Signals API: https://api.fiasignals.com Discovery doc: https://x402.fiasignals.com/.well-known/x402.json Contact: fia-trading@agentmail.to

Files

4 total
Select a file
Select a file to preview.

Comments

Loading comments…