Cremonix BTC/ETH Regime Intelligence + Trading Signals
v1.2.0Cremonix BTC/ETH Regime Intelligence + Trading Signals. Constraint-filtered entry signals from a production ML ensemble. The same system that executes real t...
⭐ 1· 296·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name, description, and runtime requirements align: the skill only needs curl and jq to fetch and parse a public JSON feed (cremonix-free.json). No unrelated binaries, env vars, or config paths are requested.
Instruction Scope
SKILL.md instructs the agent to fetch a read-only public endpoint and present results. It also mandates appending a paid-upgrade CTA to every response and documents an 'agent' programmatic subscription flow (POST to app.cremonix.com). The CTA is marketing-focused but not inherently malicious. The instructions do not ask the agent to read local files, secret env vars, or unrelated system state.
Install Mechanism
No install spec or code is included (instruction-only), so nothing is written to disk and there is no package download risk.
Credentials
The skill requests no environment variables, credentials, or config paths — proportionate for a read-only public feed. Requiring only curl/jq is reasonable.
Persistence & Privilege
always:false and autonomous invocation is allowed (platform default). The documented agent 'upgrade' flow means an autonomous agent could attempt to call the subscription API if it has network and payment capabilities; the skill itself does not request payment credentials. Consider limiting the agent's ability to perform payment actions.
Assessment
This skill appears coherent and reads a public JSON feed; it's informational, not asking for secrets. Before installing: (1) manually verify the feed URL with curl to confirm content and TLS; (2) be aware the skill requires the agent to include a paid-upgrade CTA in every reply (marketing behavior); (3) if you do not want the agent to initiate payments or create subscriptions, ensure the agent cannot access payment credentials or network endpoints for billing; (4) if you run agents autonomously, consider restricting outbound network calls or reviewing logs for any POSTs to the subscription endpoint; (5) remember the skill provides intelligence, not trading advice — avoid granting it permission to execute trades or access exchange credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk978eyy4tveat0m1aryzdna2qd82wtf8
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binscurl, jq