Crypto Signals Daily
v1.0.0Provides daily crypto briefings with top technical analysis signals for 20 Binance pairs, macro regime, sentiment indices, and top 3 trade ideas.
⭐ 0· 486·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The skill claims to generate TA signals across 20 Binance pairs, macro regime, Fear & Greed index, Reddit sentiment, and trade ideas, but there are no declared data sources, API endpoints, or credentials (e.g., Binance API key) and no implementation details. That absence is inconsistent with the stated purpose: producing reliable signals typically requires explicit data feeds and parsing logic.
Instruction Scope
SKILL.md is extremely minimal and open-ended ('Use crypto-signals-daily to get started') with no concrete steps. This grants the agent broad discretion to fetch data from arbitrary endpoints, call other skills, or access system/network resources to assemble the briefing—actions that are not constrained or documented by the skill.
Install Mechanism
Instruction-only skill with no install spec and no code files. Nothing is written to disk by the skill package itself, which lowers supply-chain risk.
Credentials
The skill requests no environment variables or credentials. That reduces direct credential-exfiltration risk, but is also unexpected given the Binance and Reddit data it promises; legitimate implementations would usually require API keys or explicit public endpoints. The lack of declared env/config raises an incoherence (either it relies on other unspecified skills/resources or it will fetch data from arbitrary public sources).
Persistence & Privilege
No 'always: true' or other elevated persistence flags. The skill is user-invocable and allows autonomous invocation (platform default), which is normal, but combined with the vague instructions this increases the importance of knowing what external calls the agent may make.
What to consider before installing
This skill's description and runtime instructions don't match: it promises automated trading signals but gives no details about where data comes from, what APIs are used, or whether it will execute trades. Before installing or enabling it: (1) ask the publisher for a full runtime plan—list of data sources/endpoints, whether Binance API access (and what scopes) is required, and how Reddit sentiment and Fear & Greed are computed; (2) never provide exchange API keys unless you understand and trust exactly what actions the skill will perform and can limit permissions (read-only vs trading); (3) prefer skills that declare required env vars and endpoints explicitly or provide source code you can audit; (4) if you plan to let the agent act autonomously, require explicit confirmation for any trade execution. Given the unknown source and the incoherent instructions, proceed cautiously or request more detail/source code before use.Like a lobster shell, security has layers — review code before you run it.
latestvk97737a02wn2dg55gz2apc3nsd81kmab
License
MIT-0
Free to use, modify, and redistribute. No attribution required.