CMC Kline Data Collector
PassAudited by ClawScan on May 1, 2026.
Overview
The skill appears to do the advertised public CoinMarketCap data collection and indicator output, with some disclosed file-writing, dependency, and cron-scheduling details users should verify.
This looks safe for fetching public crypto market data, but install dependencies carefully, keep outputs in a dedicated folder, and do not enable the documented cron job unless you want daily background collection.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If directed to a bad path, the skill could overwrite a file the user can write to.
The output filename is caller-controlled and is opened for writing. File output is part of the skill's purpose, but users should avoid absolute paths, traversal paths, or overwriting important files.
def save_json(self, kline: KlineData, filename: Optional[str] = None) -> str:
...
filepath = self.output_dir / filename
with open(filepath, "w", encoding="utf-8") as f:Use the default output directory or safe relative filenames, and confirm before writing to existing or sensitive paths.
A future or unexpected package version could behave differently from the version the author tested.
The skill documents installing the `requests` package without a pinned version. This is expected for HTTP access, but the dependency source/version is not locked by the artifacts.
## 依赖 ```bash pip install requests ```
Install dependencies from a trusted package index and consider pinning a known-good `requests` version.
If enabled separately, the collector would keep running daily and writing output files until the cron job is removed.
The documentation describes a daily scheduled task. It is disclosed and aligned with routine data collection, and the provided install artifacts do not show automatic cron installation.
0 9 * * * cd /home/admin/.openclaw/workspace/crypto-data-processor && python scripts/daily_kline.py --output /home/admin/.openclaw/workspace/crypto-data-processor/output/daily_$(date +\%Y\%m\%d).json
Only enable the cron task if you want recurring collection, and verify the referenced script and output path before use.