CryptoLens
v2.0.1CryptoLens — AI-driven multi-coin crypto analysis. Compare 2-5 coins (relative performance, correlation matrix, volatility ranking), get single-coin technica...
⭐ 1· 269·0 current·0 all-time
byAltair@godofbush
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (multi-coin comparison, indicators, scoring) match the bundled Python script and its use of CoinGecko/Hyperliquid data sources and charting libraries. Requiring python3 and numpy/matplotlib is proportionate.
Instruction Scope
SKILL.md directs the agent to run the included script with a user wallet id and to return generated charts via a MEDIA: <path> line. The runtime instructions and the script operate on market APIs and /tmp caches only — they do not request unrelated files, local credentials, or broad system access.
Install Mechanism
There is no download/install step beyond using the provided Python script and the small requirements.txt (matplotlib, numpy). No third-party archives or unusual install locations are used.
Credentials
The skill does not request environment variables or user secrets, but the Python script contains an embedded SkillPay API key and Skill ID (documented in SKILL.md as 'embedded'). Embedding a publisher billing key is consistent with a paid skill, but it means the key is present in distributed code and could be inspected or reused if exposed. SKILL.md also requires the user to provide a BNB wallet address (--user-id) for billing; the script does not ask for private keys.
Persistence & Privilege
The skill is not forced-always, does not modify other skills, and only writes transient cache files to /tmp. It does not request elevated or persistent system privileges.
Assessment
This skill appears to do what it says: fetch market data, compute indicators, and generate charts. Before installing, be aware that (1) the script embeds a publisher SkillPay API key and Skill ID — this is required for the skill to create billing charges for a provided wallet address, but the key is in cleartext in the code, so only install if you trust the publisher; (2) you should never provide private keys or secrets — the skill only needs a public wallet address for billing; (3) inspect the full script yourself (the provided file was truncated) or run it in a sandbox if you want to verify there are no hidden endpoints or behaviors; and (4) review SkillPay.me's terms and the payment flow described in SKILL.md so you understand whether charges require your explicit on-chain approval (as claimed). If you don't trust the publisher or the embedded key, do not install or run the skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97eavekh5pz6dmcetytqkp1gs82a807
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📊 Clawdis
Binspython3