Bitcoin Market Intelligence
ReviewAudited by ClawScan on May 10, 2026.
Overview
This is a coherent paid Bitcoin-data skill, but it asks your agent to use a funded Lightning wallet to pay a Tor service without declared credential requirements or clear spend-approval limits.
Install only if you are comfortable letting your agent make small Lightning payments to this Tor-hosted API. Use a dedicated low-balance Lightning wallet, require payment approval or caps, and independently verify the service/operator because the provided artifacts do not include source code or a homepage.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
An agent using this skill could spend sats from your Lightning node when requesting data.
A funded Lightning node gives the agent/tooling access to spend real funds; the registry metadata declares no primary credential, required config path, or required binary for this authority.
- A configured Lightning node (LND) with a funded channel
Use a dedicated low-balance wallet/channel, require per-invoice approval or strict spending caps, and have the skill declare its LND/lnget/Tor requirements explicitly.
Repeated or autonomous calls could incur real Lightning payments, even if each call is small.
The normal workflow is a command that reaches a paid endpoint. The instructions disclose the price, but do not include explicit user confirmation, retry controls, or total-spend limits.
# Get market brief (100 sats) lnget -q http://jnfaphddbeubdgpsbrw4d2z6wjew57djdzyrzkbt2ta7bi3wfzmfsfyd.onion/api/market-brief
Require explicit user approval before paid endpoint calls and configure lnget/LND with low limits for this skill.
Users may not realize they need extra wallet/Tor tooling until after installation, and the reviewed artifact set does not pin or validate that tooling.
The skill depends on external tooling and network access, but the registry lists no required binaries or install spec. This is purpose-aligned, but under-declared.
- `lnget` installed ([github.com/lightninglabs/lnget](https://github.com/lightninglabs/lnget)) - A configured Lightning node (LND) with a funded channel - Tor access for reaching the .onion endpoint
Declare lnget, Tor, and LND requirements in metadata and document tested versions or safe installation steps.
A user may over-trust the service or operator based on claims that were not verifiable in the review artifacts.
These are trust and security claims, but the supplied registry shows an unknown source and no homepage, so the claims cannot be substantiated from the provided artifacts.
Open source. VirusTotal clean. Built by a real operator running mainnet Lightning.
Verify the project source, operator identity, and service reputation independently before connecting a funded Lightning node.