ClawHub

Methodalgo Market Intel Explorer

v1.1.1

Fetches cryptocurrency news, chart snapshots, macroeconomic events data, and trading signals. Use this skill when the user wants to check the latest crypto n...

⭐ 0· 58·1 current·1 all-time
by@methodalgo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (crypto news, snapshots, signals) match the declared requirements: a METHODALGO_API_KEY and the 'methodalgo' CLI (installed from npm package methodalgo-cli). Node/npm are listed as alternatives for installing the CLI—this is appropriate.
✓
Instruction Scope
SKILL.md instructs only on installing/authenticating the CLI and running explicit methodalgo commands with --json/--url. It does not instruct access to unrelated system files, other credentials, or unexpected external endpoints beyond methodalgo's documented API and tmp image domain.
✓
Install Mechanism
Install uses a published npm package (methodalgo-cli) which is a standard, traceable distribution mechanism; no arbitrary downloads, extract-from-URL steps, or unknown hosts are used.
✓
Credentials
The skill requires a single API key, METHODALGO_API_KEY, which is the expected credential for calling the Methodalgo service. No unrelated secrets, system paths, or extra credentials are requested.
✓
Persistence & Privilege
The skill is not always-enabled and does not request elevated or system-wide persistence. It may rely on the CLI storing the API key locally when using 'methodalgo login', which is normal for CLI tools.
Assessment
This skill appears internally consistent, but before installing: 1) Verify the npm package reputation (methodalgo-cli) and review its source on GitHub if you can. 2) Prefer setting METHODALGO_API_KEY as an environment variable for agents rather than typing it interactively; avoid embedding keys in prompts. 3) Be aware that 'methodalgo login' stores the key locally—ensure your machine/agent environment is secure. 4) If you deploy this to a multi-tenant or production agent, use a scoped API key and rotate it periodically. 5) Confirm the snapshot URLs (m.methodalgo.com) and any fetched content are acceptable for your security/privacy requirements.

Like a lobster shell, security has layers — review code before you run it.

latestvk9771tja81cjks9js9grka301h843fn1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binsmethodalgo
Any binnode, npm
EnvMETHODALGO_API_KEY
Primary envMETHODALGO_API_KEY

Install

Node
Bins: methodalgo
npm i -g methodalgo-cli

Comments