ClawHub

coin-crypto-research-using-cmc-cli

v1.0.4

Coin research and crypto token analysis with CoinMarketCap (CMC) CLI. Deep-dive any coin or crypto — price, market cap, volume, on-chain stats, historical OH...

⭐ 0· 43·0 current·0 all-time
byCoinMarketCap@coinmarketcap-official
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (coin research via CMC CLI) matches requirements: the skill needs the cmc binary and CMC_API_KEY. These are exactly the capabilities needed to run the documented commands.
✓
Instruction Scope
SKILL.md instructs only to run cmc CLI commands, resolve asset IDs, fetch quotes/history/pairs/metrics and synthesize results. It does not direct reading unrelated files, harvesting other env vars, or sending data to third-party endpoints outside CoinMarketCap.
ℹ
Install Mechanism
No install spec (instruction-only), which is low risk. The user will need to install the cmc CLI themselves — ensure it is obtained from the official repository or release page listed in the skill homepage to avoid supply-chain risk.
✓
Credentials
Only CMC_API_KEY is required and declared as the primary credential. That matches the service the skill integrates with and is proportionate to the functionality.
✓
Persistence & Privilege
always is false and the skill is user-invocable only. It does not request persistent system-wide configuration or extra privileges.
Assessment
This skill is coherent: it expects the cmc CLI and your CMC_API_KEY. Before installing or using it, (1) install cmc from the official GitHub link in the skill to avoid a malicious binary, (2) treat CMC_API_KEY like any secret (do not paste it publicly), and supply only that key to the skill, (3) be aware the agent will execute the cmc binary on the host where the agent runs (so its network requests and commands will run from that environment), and (4) if you are concerned about exposure, create a limited/rotatable API key for testing and revoke it if you suspect leakage.

Like a lobster shell, security has layers — review code before you run it.

latestvk97a2nhsv4sp6zyfgdybsnvk19840x02

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binscmc
EnvCMC_API_KEY
Primary envCMC_API_KEY

Comments