ClawHub

CoinMarketCap Onchain Data APIs

v1.0.1

API reference for CoinMarketCap DEX endpoints including token lookup, pools, transactions, trending, and security analysis. Use this skill whenever the user...

⭐ 1· 406·0 current·0 all-time
byCoinMarketCap@bryan-cmc·duplicate of @bryan-cmc/cmc-api-dex
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description and the provided reference files all describe CoinMarketCap DEX/on-chain APIs and the listed endpoints. There are no unexpected binaries, installs, or unrelated credential requests.
✓
Instruction Scope
SKILL.md is an API reference with curl examples and workflows that stay within the scope of querying CMC DEX endpoints (pro-api.coinmarketcap.com). It does not instruct reading arbitrary local files or sending data to third-party endpoints outside the documented API.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk or downloaded.
ℹ
Credentials
The documentation shows every request requires an X-CMC_PRO_API_KEY header (i.e., an API key). The registry metadata lists no required environment variables or primary credential. This is not a functional contradiction (the key can be provided at runtime), but it's a minor omission: the skill should declare that a CoinMarketCap API key is the primary credential so users know to supply it securely.
✓
Persistence & Privilege
always is false and the skill does not request persistent system privileges or modify other skills or system configuration. Allowed-tools includes Bash/Read, which is reasonable for curl examples; the skill itself does not instruct privileged actions.
Assessment
This skill is a documentation/reference pack for CoinMarketCap DEX APIs and appears internally consistent. Before installing: (1) plan to supply your CoinMarketCap API key securely (the docs use X-CMC_PRO_API_KEY but the registry metadata does not declare a primary credential); put the key into your agent's secret storage rather than pasting it into chat. (2) Note that allowed tools include Bash/Read — the examples run curl to pro-api.coinmarketcap.com; avoid giving the agent other sensitive values (wallet private keys, other API keys, or local file contents) when invoking this skill. (3) Confirm you trust the source (no homepage/source provided here) before sharing your API key. If you want tighter control, require user invocation only and do not allow autonomous invocation for this skill in your agent settings.

Like a lobster shell, security has layers — review code before you run it.

latestvk97exx0ja46gsm2j89b50nsrms825xzt

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments