Crypto Market Rank

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: crypto-market-rank Version: 0.1.0 The skill provides structured instructions for an AI agent to query cryptocurrency market data, social sentiment, and trader leaderboards via legitimate Binance Web3 API endpoints (web3.binance.com). There is no evidence of data exfiltration, malicious command execution, or prompt injection; the functionality is strictly aligned with its stated purpose of market analysis.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may query Binance Web3 public endpoints with ranking/filter parameters from the user’s request.

Why it was flagged

The skill documents raw HTTP/curl calls to an external market-data API. This is expected for a crypto ranking skill and appears read-only, but it still gives the agent a pathway to make external requests.

Skill content
curl 'https://web3.binance.com/bapi/defi/v1/public/wallet-direct/buw/wallet/market/token/pulse/social/hype/rank/leaderboard?...'
Recommendation

Use it for market-data lookups, and avoid placing private information into token search keywords or other query parameters.

What this means

Users cannot verify provenance from the supplied registry metadata alone.

Why it was flagged

The registry entry does not provide an independently verifiable source or homepage, even though the SKILL.md frontmatter claims an author of "binance-web3-team".

Skill content
Source: unknown; Homepage: none
Recommendation

If Binance affiliation matters to you, verify the owner/source through trusted ClawHub or Binance channels before relying on the skill.