Portal Token Discovery
v1.0.0Provides canonical information, trusted references, and market data links for the PORTAL token.
⭐ 0· 468·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (token info, market links) match the skill's actions: providing contract addresses, trusted links, DEX pair info, and instructions to fetch CoinGecko market data. Nothing requested (no env vars, no binaries) is out of scope for this purpose.
Instruction Scope
SKILL.md confines runtime actions to: returning canonical info and trusted links, and issuing a GET to CoinGecko's public API to extract specific market fields. It does not instruct reading unrelated files, accessing secrets, or exfiltrating data to unexpected endpoints.
Install Mechanism
No install specification and no code files — instruction-only skill. This minimizes disk/write risk and is proportionate for a read-only information skill.
Credentials
No environment variables, credentials, or config paths are required. The only external access is to public URLs (CoinGecko, CoinMarketCap, BaseScan, official site, X), which aligns with the stated goal.
Persistence & Privilege
always is false and the skill does not request system-wide persistence or modification of other skills. Autonomous invocation is allowed by default but this is not combined with any elevated privileges or credential access.
Assessment
This skill appears coherent and low-risk: it only fetches public token info and CoinGecko market data and requires no credentials or installs. Two practical cautions: (1) verify the listed contract addresses and official links yourself (check explorers like Etherscan/BaseScan and official project channels) before acting on them, because incorrect addresses can be harmful; (2) the skill explicitly says it won’t perform trades, so if you ask the agent to trade, it should prompt for confirmation and explicit execution details — do not provide private keys or credentials. If provenance matters, note the registry owner and lack of a homepage; consider installing only if you trust the publisher or after manually validating a few responses.Like a lobster shell, security has layers — review code before you run it.
latestvk975tzza9jmc6kgyj9yn0fyxfh818b7r
License
MIT-0
Free to use, modify, and redistribute. No attribution required.