ClawHub

bitmart wallet skill

v1.0.0

BitMart Web3 Wallet Skills (12 endpoints): Token Search, Chain Details, Token Info, K-Line Chart, Hot Token Ranking, xStock Ranking, Smart Money P&L Ranking,...

⭐ 0· 84·0 current·0 all-time
by@mccoysc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description list the 12 BitMart wallet endpoints and the SKILL.md documents exactly those endpoints and workflows. There are no unexpected environment variables, binaries, or install steps demanded that would contradict the stated purpose.
ℹ
Instruction Scope
SKILL.md instructs the agent to perform POST requests to api-cloud.bitmart.com and to follow a token-resolution workflow (token-search -> token-info -> target endpoint). This stays within the described wallet/market query scope. Important: to answer requests about balances/transactions/swaps the agent will send wallet addresses and token identifiers to an external API — a privacy/data-sharing consideration but coherent with the skill's purpose.
✓
Install Mechanism
No install spec or code files are present (instruction-only). That reduces risk: nothing is written to disk and no external archives are fetched.
✓
Credentials
The skill requests no environment variables, credentials, or config paths. This is proportionate for a read/query-only wrapper around public APIs. Note: although no secrets are requested, the agent will transmit user-supplied addresses and token data over the network to the documented external endpoint.
✓
Persistence & Privilege
always is false and there is no install-time persistence. The skill can be invoked by the agent (normal), but it does not request elevated or persistent system privileges.
Assessment
This skill appears to do what it claims: query BitMart's public Web3 wallet APIs without needing keys. Before installing: (1) be aware that any wallet addresses or token identifiers you ask about will be sent to api-cloud.bitmart.com — do not submit private keys or secrets; (2) if you care about privacy, avoid querying personally identifying or proprietary addresses; (3) confirm you trust the BitMart endpoint and the skill source (source is listed as unknown here, but SKILL.md points at bitmart.com); (4) test with non-sensitive addresses first and monitor network activity and rate limits (15 req/s per IP). If you require an offline or self-hosted solution, this skill is not appropriate.

Like a lobster shell, security has layers — review code before you run it.

latestvk977andrmy2kqtc1jy3mxnm6yx838zkw

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments