Crypto Market
v1.0.6Cryptocurrency market data and price alert monitoring tool based on CCXT. Supports multiple exchanges, real-time price tracking, and configurable price/volat...
⭐ 16· 2.5k·11 current·11 all-time
bymanifold@manifoldor
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the included Python script and SKILL.md. The script uses CCXT to fetch market data, OHLCV, and order books and implements local alert management — all coherent with a crypto market/alert tool.
Instruction Scope
SKILL.md only instructs installing ccxt and running the included script with explicit commands. The runtime instructions do not ask the agent to read unrelated system files or transmit data to unintended endpoints. The script performs network calls only to exchange APIs via CCXT.
Install Mechanism
This is an instruction-only skill with no install spec. SKILL.md recommends pip installing ccxt (a standard public package). No downloads from untrusted URLs or archive extraction are present.
Credentials
The skill declares no required env vars or credentials. The code uses public CCXT endpoints by default and does not read extraneous environment variables. The documentation notes how API keys could be used for private endpoints (typical for CCXT) — supplying keys would be optional and should be done cautiously by the user.
Persistence & Privilege
The script persists alerts locally under ~/.config/crypto/alerts.json. 'always' is false and the skill does not modify other skills or global agent settings. Local persistence is expected for an alerts tool, but users should be aware of the file location and content.
Assessment
This skill appears to do what it says: fetch public market data via CCXT and manage local price alerts. The included Python source is readable and matches the documentation. Before installing or running: (1) inspect the script (it's included) if you have concerns; (2) note it will make outbound network requests to exchange APIs (normal for market data); (3) it stores alerts in ~/.config/crypto/alerts.json — remove that file if you want no persistent state; (4) the skill does not require API keys, but if you elect to add keys for private actions, keep them secret and understand you’re enabling account-level operations; (5) the skill's source/homepage is not provided, so exercise standard caution (review code and run in a controlled environment if desired).Like a lobster shell, security has layers — review code before you run it.
crypto binance bitcoinvk97dyt44fbfvdcb25q3whb974h80fr5flatestvk977945fchtce01qkvf6bhmj3n834jfk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.