ClawHub

market-report-using-cmc-cli

v1.0.7

Daily coin market report and crypto snapshot via CoinMarketCap (CMC) CLI. Covers BTC and ETH prices, top coin gainers and losers, trending crypto tokens, and...

⭐ 0· 38·0 current·0 all-time
byCoinMarketCap@coinmarketcap-official
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, required binary (cmc), and required env var (CMC_API_KEY) are coherent for a CoinMarketCap CLI-based market-report skill.
✓
Instruction Scope
SKILL.md confines actions to running specific cmc commands (metrics, price, trending, top-gainers-losers, news) and gives clear limits (avoid raw Pro API, use resolve/history only when necessary). It does not instruct reading unrelated files, other env vars, or exfiltrating data.
✓
Install Mechanism
No install spec is provided (instruction-only). Nothing is downloaded or written to disk by the skill itself — the agent just needs an existing cmc binary on PATH.
✓
Credentials
Only CMC_API_KEY is required and declared as the primary credential, which is proportionate to using the CoinMarketCap CLI. No unrelated secrets or config paths are requested.
✓
Persistence & Privilege
Skill is not forced-always-on. It uses normal autonomous invocation capability (platform default) and does not request system-wide config changes or elevated persistence.
Assessment
This skill appears internally consistent, but check two operational points before installing: (1) Ensure the 'cmc' CLI on the agent is the official, up-to-date binary from the linked repository (a malicious or tampered cmc binary could run arbitrary code). (2) Supply CMC_API_KEY with least privilege and monitor/rotate the key as needed — the skill only needs that single API key. Also be aware the agent will execute the cmc binary when invoked; if you allow autonomous invocation, the skill can run those commands without additional prompts. If you want extra caution, install and verify the cmc CLI yourself on a controlled environment and restrict the skill's usage to interactive (user-invoked) runs.

Like a lobster shell, security has layers — review code before you run it.

latestvk973xc5d1yybtpm5gybhrw1an9841y22

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binscmc
EnvCMC_API_KEY
Primary envCMC_API_KEY

Comments