Xanadu Crypto Monitor

Monitor cryptocurrency prices, set customizable price alerts, track large whale transactions, analyze on-chain metrics, and manage crypto portfolios.

Security Scan

The skill mostly matches a crypto-monitoring purpose, but it includes hardcoded billing credentials, copy-paste artifact(s), and broken/truncated code — these inconsistencies warrant caution before installing or running it.

Purpose & Capability

Name/description and most files (scripts/monitor.py) match a crypto monitoring tool. However, scripts/billing.py has a docstring referencing a different product ('Social Media Manager'), and scripts/billing_config.py bakes an SKILLPAY_API_KEY and OWNER_WALLET into source — a mismatch and unexpected secret in the repo. Monetization (SkillPay) is plausible for a paid tier, but embedding an API key in the codebase is disproportionate and risky.

Instruction Scope

SKILL.md runtime instructions only reference monitor.py commands and storing alerts under ~/.openclaw/crypto-monitor which matches monitor.py behavior. The README does not describe SkillPay details, but the repo contains billing integration — SKILL.md's instructions do not mention charging flows or when billing is invoked. monitor.py reads/writes only in its data directory and calls public crypto APIs (CoinGecko); it does not request unrelated OS files or env vars. However, the code contains mangled/buggy lines in fetch_onchain_stats and monitor.py appears truncated, indicating incomplete or tampered code.

Install Mechanism

No install spec — instruction-only with shipped Python scripts. This is lower risk than arbitrary download/extract installers. Dependencies are standard (requests, Python 3.10+).

Credentials

The skill declares no required environment variables, but scripts/billing_config.py contains a hardcoded SKILLPAY_API_KEY (sk_... ) and OWNER_WALLET address. Including a secret API key in distributed code is disproportionate — it exposes credentials to anyone who downloads the skill and could allow misuse or unintended charges. There are also inconsistencies about SKILL_ID between billing.py defaults and billing_config.py. No other secret-env access is requested.

Persistence & Privilege

always:false (no forced inclusion). The skill writes local state to ~/.openclaw/crypto-monitor (alerts.json, portfolio.json), which is consistent with its purpose. It does not request system-wide config changes or modify other skills.

What to consider before installing

Do not run this skill unmodified. Specific concerns: (1) scripts/billing_config.py contains a hardcoded SKILLPAY_API_KEY and OWNER_WALLET — this leaks credentials and could be misused; if that key is real, it should be rotated immediately. (2) scripts/billing.py contains a mismatched docstring (copy-paste from another product) and billing code that will attempt to contact api.skillpay.me; understand when and how billing is triggered before use. (3) scripts/monitor.py contains malformed code in fetch_onchain_stats and appears truncated at the end, indicating the skill may be incomplete or corrupted. Recommended actions: inspect and remove any hardcoded secrets (or replace them with documented required env vars), contact the publisher for a clean, verified release, run the code in an isolated sandbox if you must test it, and avoid providing any real payment/credential information until the issues are resolved. If you downloaded this from a public registry, consider reporting the leaked key to the service (SkillPay) and the registry, and do not use the embedded key.

Crypto Monitor

Monitor cryptocurrency prices, alerts, whale activity, and on-chain metrics.

Quick Start

# Check prices
python scripts/monitor.py price BTC ETH SOL

# Set alert
python scripts/monitor.py alert --symbol BTC --above 100000

# Track whale transactions
python scripts/monitor.py whales --symbol BTC --min-value 1000000

# On-chain stats
python scripts/monitor.py stats BTC

Core Features

1. Price Monitoring

• Real-time prices from major exchanges
• Price alerts (above/below thresholds)
• 24h change tracking
• Multi-exchange comparison

2. Whale Tracking

• Large transaction alerts
• Exchange flows (in/out)
• Wallet tracking (optional)
• Min value thresholds

3. On-Chain Metrics

• Network volume
• Gas prices (ETH)
• TVL (Total Value Locked)
• Active addresses
• Hash rate

4. Portfolio Tracking

• Hold multiple cryptos
• P&L calculation
• Cost basis tracking
• Performance vs benchmarks

Usage

Check Prices

python scripts/monitor.py price BTC ETH SOL ADA XRP

Set Price Alert

python scripts/monitor.py alert --symbol BTC --above 100000 --below 90000
python scripts/monitor.py alert --symbol ETH --below 2000

List Alerts

python scripts/monitor.py alerts

Track Whales

python scripts/monitor.py whales --symbol BTC --min-value 1000000
python scripts/monitor.py whales --symbol ETH --min-value 500000

On-Chain Stats

python scripts/monitor.py stats BTC
python scripts/monitor.py stats ETH

Portfolio

python scripts/monitor.py portfolio --add BTC:0.5 --add ETH:10
python scripts/monitor.py portfolio --show

Supported Cryptos

• BTC (Bitcoin)
• ETH (Ethereum)
• SOL (Solana)
• ADA (Cardano)
• XRP (Ripple)
• DOT (Polkadot)
• MATIC (Polygon)
• AVAX (Avalanche)
• LINK (Chainlink)
• And 100+ more...

Alert Configuration

Alerts stored in ~/.openclaw/crypto-monitor/alerts.json

Alert types:

• --above price above threshold
• --below price below threshold
• --change 24h change % threshold

Data Sources

• CoinGecko API (free tier)
• CoinMarketCap (API key optional)
• On-chain data from public APIs

Requirements

• Python 3.10+
• requests package
• Optional: API keys for higher rate limits

---

Monetization (SkillPay)

This skill supports SkillPay integration for premium features.

Pricing Tiers

Tier	Price	Features
Basic	Free	Basic prices, 1 alert
Pro	$19/mo	Unlimited alerts, whale tracking, portfolio
Premium	$39/mo	API access, real-time push, priority support

Owner: Xanadu Studios