Crypto Market Data
PassAudited by VirusTotal on May 8, 2026.
Overview
Type: OpenClaw Skill Name: crypto-market-data-aisa Version: 1.0.1 The skill is a standard API client for fetching cryptocurrency market data from the AIsa API (api.aisa.one). The Python script (scripts/coingecko_client.py) uses the standard library's urllib to perform GET requests and properly sanitizes parameters using urllib.parse.quote. There is no evidence of data exfiltration, malicious execution, or harmful prompt injection in the SKILL.md instructions; all functionality is strictly aligned with the stated purpose of crypto market research.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your AIsa API key may be used for API access, quota, billing, or account attribution when the skill is invoked.
The client reads an AIsa API key from the environment and sends it as a bearer token to the AIsa API. This is expected for the service, but it is still account/credential use.
self.api_key = api_key or os.environ.get("AISA_API_KEY") ... "Authorization": f"Bearer {self.api_key}"Use a dedicated, least-privilege API key if available, monitor usage, and revoke or rotate the key if you uninstall or stop using the skill.
Coin IDs, exchange IDs, contract addresses, and related market-data queries may be visible to the API provider.
The bundled script performs external HTTP requests to AIsa using user-supplied query parameters. This is aligned with the skill's market-data purpose, but it means crypto queries leave the local environment.
BASE_URL = "https://api.aisa.one/apis/v1" ... urllib.request.urlopen(req, timeout=60)
Avoid sending information you consider private, such as sensitive portfolio strategy details, unless you are comfortable sharing those queries with the API provider.
The tool may be selected for some non-crypto finance questions where it cannot provide appropriate data.
The visible functionality is CoinGecko-backed cryptocurrency data, so mentioning stock analysis and dividend research could cause the agent to invoke the skill for unsupported financial tasks.
Use when: the user needs market data, stock analysis, dividend research, or read-only financial data workflows.
Use this skill for cryptocurrency and CoinGecko-style market data; use a separate finance data source for stocks or dividends.