Crypto Market Rank
v0.1.0Crypto market rankings and leaderboards. Query trending tokens, top searched tokens, Binance Alpha tokens, tokenized stocks, social hype sentiment ranks, sma...
⭐ 0· 362·11 current·11 all-time
by@awessh
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill name and description match the APIs and parameters documented in SKILL.md (various Binance web3 public ranking endpoints). Nothing in the manifest asks for unrelated resources or credentials. Note: the skill's source/homepage are not provided and the metadata author claims 'binance-web3-team' — that claim is plausible given the endpoints, but the package origin is unverified.
Instruction Scope
SKILL.md contains concrete API endpoints, parameter lists, and curl examples that stay within the stated purpose: fetching market/rank data from web3.binance.com. The instructions do not direct reading local files, accessing unrelated environment variables, or transmitting data to third-party endpoints outside the documented Binance domain.
Install Mechanism
No install spec or code files are present (instruction-only), so nothing is written to disk or installed. This is the lowest-risk install posture.
Credentials
The skill requests no environment variables, credentials, or config paths. That is proportionate for a skill that calls public APIs. There are no unexplained SECRET/TOKEN or cloud credentials requested.
Persistence & Privilege
always is false and the skill does not request special persistence or modify other skills. Model invocation is allowed (platform default), which is expected for a normal skill.
Assessment
This skill appears to be an instruction-only wrapper around public Binance web3 ranking endpoints and doesn't ask for secrets or install code — so it's internally coherent. Before installing, consider: (1) the package source is unknown and the declared author is unverified; if you need cryptographic provenance or an official Binance integration, look for an official source/homepage. (2) The agent will make network requests to https://web3.binance.com when invoked, so avoid sending sensitive private data (private keys, passwords, or proprietary addresses you don't want transmitted). (3) If you require greater assurance, ask the publisher for a homepage or repository link or run the same curl examples yourself to confirm responses.Like a lobster shell, security has layers — review code before you run it.
latestvk97cpxatjjcyyypx6mq8mwyff582e56a
License
MIT-0
Free to use, modify, and redistribute. No attribution required.