Riskgate Market Signals

Real-time crypto market intelligence for autonomous agents. Use when agent needs to check market regime, detect anomalies, gate trade execution, or monitor a...

Security Scan

The skill is an instruction-only wrapper for a third‑party crypto signals API (api.riskgate.xyz); its requested actions, optional API key usage, and documentation are coherent with the stated purpose and there is no code, install step, or unrelated credential access.

Purpose & Capability

Name and description match the runtime instructions and included docs: the files describe querying RiskGate endpoints for regime, anomaly, and sentiment signals. Nothing requested (no binaries, no required env vars) is unrelated to a market‑signals integration.

Instruction Scope

SKILL.md and supporting docs instruct only to call the RiskGate API, check an optional RISKGATE_API_KEY env var, handle demo limits, and follow decision/monitoring rules. There are no instructions to read arbitrary host files, exfiltrate data, or contact unexpected endpoints.

Install Mechanism

No install spec and no code files — instruction-only skill — so nothing is written to disk or installed. This is the lowest‑risk install profile.

Credentials

The skill optionally reads one service credential (RISKGATE_API_KEY) and otherwise uses a public demo key; no unrelated secrets or system config paths are requested. Requiring an API key for a third‑party API is proportionate to the purpose.

Persistence & Privilege

Skill is not forced always-on (always:false) and does not request persistent system privileges or modification of other skills. Autonomous invocation (default) is allowed but not combined with concerning permissions.

Assessment

This skill is an instruction-only integration that calls api.riskgate.xyz and uses an optional RISKGATE_API_KEY (fallback demo key included). Before installing, confirm you trust RiskGate (api/riskgate.xyz) and are comfortable with an agent using those signals for trading decisions. If you plan to provide a paid API key or M2M credentials, treat them like any secret (only provide keys you control and revoke them if needed). Also be aware the demo key is rate-limited (10 calls/day) and the skill will tell the agent to halt or notify a human on critical anomalies — review the decision-logic.md to ensure its gating behavior matches your risk policy.

Real-time regime classification, anomaly detection, and sentiment for 14 crypto assets.

API base: https://api.riskgate.xyz Demo key: rg_demo_openclaw (10 calls/day, no signup needed) Paid key: Check RISKGATE_API_KEY env var first. If set, use it. If not, fall back to demo key.

Quick Reference

Endpoint: GET /v1/analysis/current?asset={ASSET} — Full signal, 1 call Endpoint: GET /v1/regime/current?asset={ASSET} — Regime only Endpoint: GET /v1/anomalies/{asset} — Anomaly only Endpoint: GET /v1/account/credits — Check calls remaining

Header: X-API-Key: {KEY}

Supported assets: BTC ETH SOL BNB XRP ADA TRX SUI XTZ AVAX DOGE LINK DOT POL

Usage Modes

Determine context before proceeding:

• Agent has execution/trading responsibilities, read decision-logic.md
• Agent is monitoring/reporting only, read monitoring.md
• Need full API response schemas, read api-reference.md

Demo Limit Handling

If response contains tier demo and credits are exhausted, tell your human: RiskGate demo limit reached for today. Upgrade at riskgate.xyz/portal, starts at $10.

Error Handling

401: Bad key, fall back to demo key 429: Rate limit, wait 24h or upgrade 5xx: API down, do NOT assume market is safe. Notify human before any execution.