marsbit-crypto-news-skill

Crypto-native Web3 news and flash intelligence from MarsBit through hosted MCP. Use this for L1/L2 ecosystems, DeFi/CeFi, regulation, exchange flows, and mar...

Security Scan

The skill mostly does what it says (calls a hosted MarsBit MCP for crypto news), but there are small permission/information-flow inconsistencies and a privacy risk because user queries are sent to an external endpoint; package metadata also requests exec/read tools that the SKILL.md does not need.

Purpose & Capability

The name/description match the runtime instructions: the skill calls a hosted MCP at https://www.marsbit.co/api/mcp to fetch crypto/Web3 news. However package.json declares OpenClaw dependencies on generic tools 'exec' and 'read' (and lists 'tools': ['exec','read']) that are not required by the SKILL.md (which only uses curl). That is an unnecessary/extra permission surface and should be explained by the author.

Instruction Scope

SKILL.md confines runtime behavior to POSTing JSON to the listed MCP endpoint and parsing responses. It does not instruct reading local files or environment secrets. Important privacy/security note: any user-provided prompts or context the agent sends will be transmitted to the external host (www.marsbit.co). If users include sensitive data in queries, that data will leave the local environment.

Install Mechanism

Install spec only references Homebrew formula 'curl' (a standard HTTP client). This is a low-risk, well-known package source; no downloads from arbitrary URLs or archived extracts are used. The skill is instruction-only with no code files to write/execute on install.

Credentials

The skill requests no environment variables or credentials. That is proportionate for a read-only news-fetching skill. The one inconsistency is package.json listing 'tools': ['exec','read'] which implies permission to execute or read files — not justified by SKILL.md.

Persistence & Privilege

always:false and no install scripts or config writes are specified. The skill does not request permanent elevated presence or system-wide config changes.

What to consider before installing

Before installing: 1) Understand data flow — this skill sends requests (including your query text) to https://www.marsbit.co/api/mcp. Do not include secrets or private data in prompts you expect the skill to forward. 2) Verify the source — the SKILL.md points to a GitHub repo and a ClawHub page; inspect that repo to confirm it matches the published SKILL.md and to ensure no hidden code is present. 3) Ask the author/maintainer about package.json's declared tools ('exec', 'read') — these permissions are broader than the documented curl-only behavior. 4) If you need stronger privacy, avoid installing and instead manually query the MCP endpoint from an isolated environment or request a self-hosted alternative. 5) Test with innocuous queries and inspect responses; check TLS certificate for the endpoint and consider network/firewall controls if you are in a sensitive environment.

MarsBit Crypto News Skill (Web3-focused)

This skill is designed to work immediately after installation using the hosted MCP endpoint.

MCP endpoint:

• https://www.marsbit.co/api/mcp

Use this endpoint in all commands:

MCP_URL="https://www.marsbit.co/api/mcp"

Capabilities

Use this skill when users ask about:

1. Crypto market-moving headlines
2. Web3 ecosystem updates (Ethereum, Solana, Base, Arbitrum, etc.)
3. DeFi protocols, CeFi exchanges, ETFs, policy and regulation
4. Flash updates for short-term market sentiment
5. Narrative discovery (RWA, AI x Crypto, DePIN, restaking, meme sectors)

Runtime rules

When user asks for crypto/Web3 information, call MCP tools via curl directly.

Required headers for every MCP POST:

• Content-Type: application/json
• Accept: application/json, text/event-stream
• mcp-protocol-version: 2025-11-25

Response parsing:

• MCP wraps tool output in result.content[0].text
• text is a JSON string; parse it before answering
• If success is false, surface the error and ask user whether to retry with different params

Web3 answer format recommendation:

1. TL;DR (1-2 lines)
2. Market impact (bullish / bearish / neutral + why)
3. Key entities (token/protocol/chain/exchange/regulator)
4. Sources with publication time

Tool calls

1) List tools (quick connectivity check)

curl -sS -X POST "$MCP_URL" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -H "mcp-protocol-version: 2025-11-25" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}'

2) Get news channels

curl -sS -X POST "$MCP_URL" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -H "mcp-protocol-version: 2025-11-25" \
  -d '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"get_news_channels","arguments":{}}}'

3) Get latest crypto/Web3 news

curl -sS -X POST "$MCP_URL" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -H "mcp-protocol-version: 2025-11-25" \
  -d '{"jsonrpc":"2.0","id":3,"method":"tools/call","params":{"name":"get_latest_news","arguments":{"limit":10}}}'

4) Search news by Web3 keyword

curl -sS -X POST "$MCP_URL" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -H "mcp-protocol-version: 2025-11-25" \
  -d '{"jsonrpc":"2.0","id":4,"method":"tools/call","params":{"name":"search_news","arguments":{"keyword":"Ethereum Layer2","limit":10}}}'

5) Get one news detail by id

curl -sS -X POST "$MCP_URL" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -H "mcp-protocol-version: 2025-11-25" \
  -d '{"jsonrpc":"2.0","id":5,"method":"tools/call","params":{"name":"get_news_detail","arguments":{"news_id":"20260304151610694513"}}}'

6) Get related news by id

curl -sS -X POST "$MCP_URL" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -H "mcp-protocol-version: 2025-11-25" \
  -d '{"jsonrpc":"2.0","id":6,"method":"tools/call","params":{"name":"get_related_news","arguments":{"news_id":"20260304151610694513","limit":6}}}'

7) Get latest crypto flash updates

curl -sS -X POST "$MCP_URL" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -H "mcp-protocol-version: 2025-11-25" \
  -d '{"jsonrpc":"2.0","id":7,"method":"tools/call","params":{"name":"get_latest_flash","arguments":{"limit":10}}}'

8) Search flash by Web3 keyword

curl -sS -X POST "$MCP_URL" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -H "mcp-protocol-version: 2025-11-25" \
  -d '{"jsonrpc":"2.0","id":8,"method":"tools/call","params":{"name":"search_flash","arguments":{"keyword":"Solana meme","limit":10}}}'

Intent -> tool routing (Web3)

1. Latest crypto headlines -> get_latest_news
2. Category/channel browsing -> get_news_channels
3. Narrative or keyword lookup -> search_news
4. Deep dive one article -> get_news_detail
5. Context expansion -> get_related_news
6. Short-term market pulse -> get_latest_flash
7. Event scanning by keyword -> search_flash

Useful query patterns:

1. Chain: Ethereum, Solana, Base, Arbitrum, Sui
2. Protocol: Uniswap, Aave, Jupiter, Pendle
3. Narrative: RWA, DePIN, restaking, AI crypto
4. Risk/Event: hack, exploit, liquidation, SEC, ETF

Backend architecture alignment

This skill relies on the current marsbit-co hosted MCP implementation (/api/mcp), which internally uses:

• fetcher(..., { marsBit: true }) in src/lib/utils.ts
• News APIs: /info/news/channels, /info/news/shownews, /info/news/getbyid, /info/news/v2/relatednews
• Flash API: /info/lives/showlives
• Search API: /info/assist/querySimilarityInfo (via src/lib/db-marsbit/agent)

Install via ClawHub

clawhub login
clawhub whoami
clawhub install domilin/marsbit-crypto-news-skill
openclaw skills list

Install from GitHub

You can install this skill directly from GitHub when ClawHub is unavailable (for example, rate-limit errors).

Repository:

• https://github.com/domilin/marsbit-crypto-news-skill

Example local install:

git clone https://github.com/domilin/marsbit-crypto-news-skill /tmp/marsbit-crypto-news-skill
mkdir -p ~/.openclaw/skills/marsbit-crypto-news-skill
cp -R /tmp/marsbit-crypto-news-skill/* ~/.openclaw/skills/marsbit-crypto-news-skill/
openclaw skills list