ClawHub

Moon Banking

v1.1.0

Full access to Moon Banking API endpoints for data about every bank on Earth, including stories, votes, scores, search, country overviews, world overview, crypto-friendliness, and more. Requires MOON_BANKING_API_KEY env var.

⭐ 1· 1.7k·0 current·0 all-time
by@juanwall
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (bank data API) align with requested artifacts: a single MOON_BANKING_API_KEY and curl+jq to call https://api.moonbanking.com/v1. Nothing else (no unrelated cloud creds or system paths) is requested.
✓
Instruction Scope
SKILL.md contains explicit curl patterns and endpoint docs; it only instructs the agent to send HTTP requests to the documented API with the Authorization header. It does not direct the agent to read local files, other env vars, or exfiltrate data to unrelated endpoints.
✓
Install Mechanism
No install spec and no code files — instruction-only skill. This is the lowest-risk install model (nothing is written to disk by the skill itself).
ℹ
Credentials
Only one required env var (MOON_BANKING_API_KEY) is declared and used, which is proportional. Minor metadata inconsistency: registry summary lists 'Primary credential: none' while SKILL.md declares MOON_BANKING_API_KEY as the primary credential; this should be corrected but does not indicate malicious behavior.
✓
Persistence & Privilege
Skill does not request always:true, does not ask to modify other skills or system settings, and has no required config paths. Default autonomous invocation is allowed (platform default) but the skill's scope is limited to calling the API.
Assessment
This skill appears to simply call the Moon Banking API and needs a single API key (MOON_BANKING_API_KEY). Before installing: verify that the homepage and owner are legitimate (ensure moonbanking.com and the docs link are correct), confirm you will not reuse a high-privilege key (use a key with minimal scope or a dedicated key), and review the Moon Banking API terms/privacy. Note the small metadata mismatch (registry says no primary credential while SKILL.md requires one) — ask the publisher to correct it. Because the skill can be invoked by the agent, avoid supplying keys that grant write/delete access or broad account privileges; prefer a read-only or scoped API key and monitor API usage after enabling the skill.

Like a lobster shell, security has layers — review code before you run it.

bankingvk97cpgwgkymww7rr6w6z0hwxf180zgg7financevk97cpgwgkymww7rr6w6z0hwxf180zgg7latestvk97cpgwgkymww7rr6w6z0hwxf180zgg7

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

💰 Clawdis
OSLinux · macOS · Windows
Binscurl, jq
EnvMOON_BANKING_API_KEY

Comments