Claudius
v1.0.4Crypto intelligence powered by Claudius. Get technical analysis, prices, and insights.
⭐ 3· 1.9k·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name, README, SKILL.md, and the included Node script all align: the skill posts user queries to a Claudius API and returns market/technical answers. No unexpected binaries, credentials, or unrelated capabilities are requested.
Instruction Scope
Runtime instructions simply run the provided Node script with the query. The script does not read local files, shell history, or other environment variables (except an optional CLAUDIUS_API_URL). It transmits the user's query to a remote API — this is consistent with the skill's purpose but does transmit the query off-device.
Install Mechanism
No install specification is included in the metadata; a package.json exists and the README suggests npm install -g. There are no downloads from untrusted URLs and no extract/install steps in the skill itself.
Credentials
The skill declares no required environment variables or credentials. The code accepts an optional CLAUDIUS_API_URL override (reasonable for testing/custom endpoints) and otherwise needs no keys. No unrelated credentials are requested.
Persistence & Privilege
The skill is not forced-always, does not modify other skills, and uses normal model-invocation defaults. It does not request elevated/persistent system privileges.
Assessment
This skill forwards whatever you type to a remote API (api.claudiusai.pro by default). That means the operator can see your queries and will observe your IP address (the README states this). Before installing, consider: (1) avoid sending secrets or private keys in queries; (2) verify the service's reputation (check the GitHub repo, TLS certificate, and domain) if you care about privacy; (3) note the script allows overriding CLAUDIUS_API_URL via an environment variable — ensure that variable isn't set to a malicious endpoint in your environment; and (4) if you need an on-device or auditable alternative, prefer skills that run locally or that document end-to-end encryption. Overall this package appears internally consistent with its stated purpose.Like a lobster shell, security has layers — review code before you run it.
aivk97d79q5bys1v2rff87gvzwxxx8090srcryptovk97d79q5bys1v2rff87gvzwxxx8090srlatestvk97a1bmfbmny1n3fptm1k0a99x808n5amoltbotvk97d79q5bys1v2rff87gvzwxxx8090sr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.