币界网API

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward CoinMeta crypto-news lookup integration that uses a disclosed API key and curl, with no evidence of hidden code, persistence, mutation, or data exfiltration.

Before installing, make sure you are comfortable giving the agent access to a CoinMeta API key for crypto-news queries. The artifacts do not show hidden code or risky persistence.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI03: Identity and Privilege Abuse

Low

What this means

Your CoinMeta API key will be used when the agent queries CoinMeta for crypto news.

Why it was flagged

The skill uses a provider API key to authenticate requests to the CoinMeta service; this is disclosed and aligned with the stated news-query purpose.

Skill content

**Auth**: Header `X-Api-Key: $COINMETA_API_KEY`

Recommendation

Only install if you trust the CoinMeta API integration, and provide a scoped CoinMeta API key if the service supports scoping or rotation.