Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Binance Crypto Market Rank

v1.0.0

Crypto market rankings and leaderboards. Query trending tokens, Binance Alpha tokens, smart money inflow rankings, meme token rankings, and top trader PnL le...

0· 92·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for dexploarer/binance-crypto-market-rank.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Binance Crypto Market Rank" (dexploarer/binance-crypto-market-rank) from ClawHub.
Skill page: https://clawhub.ai/dexploarer/binance-crypto-market-rank
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install binance-crypto-market-rank

ClawHub CLI

Package manager switcher

npx clawhub@latest install binance-crypto-market-rank
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name, description, SKILL.md, and the included script all align: the script issues GET/POST requests to web3.binance.com endpoints to fetch rankings. That capability matches the stated purpose. However, the skill claims an author of 'binance-web3-team' while the registry lists source as unknown and homepage none — the claimed origin is unverified, which reduces trust.
!
Instruction Scope
SKILL.md explicitly instructs the agent to 'Run the script NOW' (RUN_SKILL_SCRIPT ...) and to summarize results. The included rankings.sh will perform network calls to external endpoints (web3.binance.com). The instructions force immediate execution rather than offering a user-confirmation path; this gives the skill operational autonomy to perform outbound requests without additional user context. The script does not read local files or environment vars, nor does it transmit local data, which is good, but the 'execute immediately' mandate is broad and should be treated cautiously.
Install Mechanism
No install spec is present (instruction-only with an included script). Nothing is downloaded or written to disk by an install step; risk from install mechanism is low.
Credentials
The skill declares no required environment variables or credentials and the script uses only public endpoints. That is proportionate. One minor inconsistency: required binaries are listed as none, but rankings.sh invokes curl and python3; the skill should declare those as prerequisites.
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges or modify other skills. Autonomous invocation (model-invocation enabled) is the default; combined with the SKILL.md directive to run the script immediately, this increases operational risk but is not itself a privilege escalation.
What to consider before installing
This skill appears to call Binance public APIs and does not ask for secrets, but it raises two practical concerns: (1) SKILL.md insists the agent execute the included script immediately and summarize results — that will make outbound HTTP requests without a separate confirmation; (2) the package claims Binance authorship but has no verified source or homepage. Before installing, consider: run the script in a sandboxed environment or review network egress rules; verify the skill author (prefer a homepage or repository you trust); confirm required binaries (curl and python3) are present or declared; and decide whether you want the agent to be allowed to autonomously run local scripts that perform network calls.

Like a lobster shell, security has layers — review code before you run it.

latestvk9767gagzj6h1rbecyr4gvg6rx840vpc
92downloads
0stars
1versions
Updated 3w ago
v1.0.0
MIT-0

Crypto Market Rank Skill

IMPORTANT: Execute scripts immediately

Do NOT just display this documentation. Run the appropriate script immediately:

  • Get trending/ranked tokens: RUN_SKILL_SCRIPT binance-crypto-market-rank rankings.sh trending
  • Get smart money inflow rankings: RUN_SKILL_SCRIPT binance-crypto-market-rank rankings.sh smart-money
  • Get top meme tokens: RUN_SKILL_SCRIPT binance-crypto-market-rank rankings.sh meme

Run the script NOW and summarize the results.

Overview

APIFunctionUse Case
Social Hype LeaderboardSocial buzz rankingSentiment analysis, social summaries
Unified Token RankMulti-type token rankingsTrending, Top Search, Alpha, Stock with filters
Smart Money Inflow RankToken rank by smart money buysDiscover tokens smart money is buying most
Meme RankTop meme tokens from Pulse launchpadFind meme tokens most likely to break out
Address Pnl RankTop trader PnL leaderboardTop PnL traders / KOL performance ranking

Use Cases

  1. Social Hype Analysis: Discover tokens with highest social buzz and sentiment
  2. Trending Tokens: View currently trending tokens (rankType=10)
  3. Top Searched: See most searched tokens (rankType=11)
  4. Alpha Discovery: Browse Binance Alpha picks (rankType=20)
  5. Stock Tokens: View tokenized stocks (rankType=40)
  6. Smart Money Inflow: Discover which tokens smart money is buying most
  7. Meme Rank: Find top meme tokens from Pulse launchpad most likely to break out
  8. PnL Leaderboard: View top-performing trader addresses, PnL, win rates
  9. Filtered Research: Combine filters for targeted token or address screening

Supported Chains

ChainchainId
BSC56
Base8453
SolanaCT_501

API 1: Social Hype Leaderboard

Method: GET

URL:

https://web3.binance.com/bapi/defi/v1/public/wallet-direct/buw/wallet/market/token/pulse/social/hype/rank/leaderboard/ai

Request Parameters:

ParameterTypeRequiredDescription
chainIdstringYesChain ID
sentimentstringNoFilter: All, Positive, Negative, Neutral
targetLanguagestringYesTranslation target, e.g., en, zh
timeRangenumberYesTime range, 1 = 24 hours
socialLanguagestringNoContent language, ALL for all

Headers: Accept-Encoding: identity

Example:

curl 'https://web3.binance.com/bapi/defi/v1/public/wallet-direct/buw/wallet/market/token/pulse/social/hype/rank/leaderboard/ai?chainId=56&sentiment=All&socialLanguage=ALL&targetLanguage=en&timeRange=1' \
-H 'Accept-Encoding: identity' \
-H 'User-Agent: binance-web3/2.1 (Skill)'

Response (data.leaderBoardList[]):

Field PathTypeDescription
metaInfo.logostringIcon URL path (prefix https://bin.bnbstatic.com)
metaInfo.symbolstringToken symbol
metaInfo.chainIdstringChain ID
metaInfo.contractAddressstringContract address
metaInfo.tokenAgenumberCreation timestamp (ms)
marketInfo.marketCapnumberMarket cap (USD)
marketInfo.priceChangenumberPrice change (%)
socialHypeInfo.socialHypenumberTotal social hype index
socialHypeInfo.sentimentstringPositive / Negative / Neutral
socialHypeInfo.socialSummaryBriefstringBrief social summary
socialHypeInfo.socialSummaryDetailstringDetailed social summary
socialHypeInfo.socialSummaryBriefTranslatedstringTranslated brief summary
socialHypeInfo.socialSummaryDetailTranslatedstringTranslated detailed summary

API 2: Unified Token Rank

Method: POST (recommended) / GET

URL:

https://web3.binance.com/bapi/defi/v1/public/wallet-direct/buw/wallet/market/token/pulse/unified/rank/list/ai

Headers: Content-Type: application/json, Accept-Encoding: identity

Rank Types

rankTypeNameDescription
10TrendingHot trending tokens
11Top SearchMost searched tokens
20AlphaAlpha tokens (Binance Alpha picks)
40StockTokenized stock tokens

Request Body (all fields optional)

Core Parameters:

FieldTypeDefaultDescription
rankTypeinteger10Rank type: 10=Trending, 11=TopSearch, 20=Alpha, 40=Stock
chainIdstring-Chain ID: 1, 56, 8453, CT_501
periodinteger50Time period: 10=1m, 20=5m, 30=1h, 40=4h, 50=24h
sortByinteger0Sort field (see Sort Options)
orderAscbooleanfalseAscending order if true
pageinteger1Page number (min 1)
sizeinteger200Page size (max 200)

Filter Parameters (Min/Max pairs):

FilterTypeDescription
percentChangeMin/MaxdecimalPrice change range (%)
marketCapMin/MaxdecimalMarket cap range (USD)
volumeMin/MaxdecimalVolume range (USD)
liquidityMin/MaxdecimalLiquidity range (USD)
holdersMin/MaxlongHolder count range
holdersTop10PercentMin/MaxdecimalTop10 holder % range
kycHoldersMin/MaxlongKYC holder count (Alpha only)
countMin/MaxlongTransaction count range
uniqueTraderMin/MaxlongUnique trader count range
launchTimeMin/MaxlongToken launch time range (timestamp ms)

Advanced Filters:

FieldTypeDescription
keywordsstring[]Include symbols matching these keywords
excludesstring[]Exclude these symbols
socialsinteger[]Social filter: 0=at_least_one, 1=X, 2=Telegram, 3=Website
alphaTagFilterstring[]Alpha narrative tags
auditFilterinteger[]Audit: 0=not_renounced, 1=freezable, 2=mintable
tagFilterinteger[]Tag filter: 0=hide_alpha, 23=dex_paid, 29=alpha_points, etc.

Sort Options

sortByField
0Default
1Web default
2Search count
10Launch time
20Liquidity
30Holders
40Market cap
50Price change
60Transaction count
70Volume
80KYC holders
90Price
100Unique traders

Example Request

curl -X POST 'https://web3.binance.com/bapi/defi/v1/public/wallet-direct/buw/wallet/market/token/pulse/unified/rank/list/ai' \
-H 'Content-Type: application/json' \
-H 'Accept-Encoding: identity' \
-H 'User-Agent: binance-web3/2.1 (Skill)' \
-d '{"rankType":10,"chainId":"1","period":50,"sortBy":70,"orderAsc":false,"page":1,"size":20}'

Response

{
  "code": "000000",
  "data": {
    "tokens": [{ "..." }],
    "total": 100,
    "page": 1,
    "size": 20
  },
  "success": true
}

Token Fields (data.tokens[]):

FieldTypeDescription
chainIdstringChain ID
contractAddressstringContract address
symbolstringToken symbol
iconstringLogo URL path (prefix https://bin.bnbstatic.com)
pricestringCurrent price (USD)
marketCapstringMarket cap
liquiditystringLiquidity
holdersstringHolder count
launchTimestringLaunch timestamp (ms)
decimalsintegerToken decimals
linksstringSocial links JSON
percentChange{1m,5m,1h,4h,24h}stringPrice change by period (%)
volume{1m,5m,1h,4h,24h}stringVolume by period (USD)
volume{1m,5m,1h,4h,24h}Buy/SellstringBuy/Sell volume by period
count{1m,5m,1h,4h,24h}stringTransaction count by period
count{1m,5m,1h,4h,24h}Buy/SellstringBuy/Sell tx count by period
uniqueTrader{1m,5m,1h,4h,24h}stringUnique traders by period
alphaInfoobjectAlpha info (tagList, description)
auditInfoobjectAudit info (riskLevel, riskNum, cautionNum)
tokenTagobjectToken tag info
kycHoldersstringKYC holder count
holdersTop10PercentstringTop10 holder percentage

API 3: Smart Money Inflow Rank

Method: POST

URL:

https://web3.binance.com/bapi/defi/v1/public/wallet-direct/tracker/wallet/token/inflow/rank/query/ai

Headers: Content-Type: application/json, Accept-Encoding: identity

Request Body:

FieldTypeRequiredDescription
chainIdstringYesChain ID: 56 (BSC), CT_501 (Solana)
periodstringNoStats window: 5m, 1h, 4h, 24h
tagTypeintegerYesAddress tag type (always 2)

Example Request

curl -X POST 'https://web3.binance.com/bapi/defi/v1/public/wallet-direct/tracker/wallet/token/inflow/rank/query/ai' \
-H 'Content-Type: application/json' \
-H 'Accept-Encoding: identity' \
-H 'User-Agent: binance-web3/2.1 (Skill)' \
-d '{"chainId":"56","period":"24h","tagType":2}'

Response (data[])

FieldTypeDescription
tokenNamestringToken name
tokenIconUrlstringIcon URL path (prefix https://bin.bnbstatic.com)
castringContract address
pricestringCurrent price (USD)
marketCapstringMarket cap (USD)
volumestringTrading volume in period (USD)
priceChangeRatestringPrice change in period (%)
liquiditystringLiquidity (USD)
holdersstringTotal holder count
kycHoldersstringKYC holder count
holdersTop10PercentstringTop10 holder percentage
countstringTransaction count in period
countBuy / countSellstringBuy / Sell tx count
inflownumberSmart money net inflow amount (USD)
tradersintegerNumber of smart money addresses trading this token
launchTimenumberToken launch timestamp (ms)
tokenDecimalsintegerToken decimals
tokenRiskLevelintegerRisk level (-1=unknown, 1=low, 2=medium, 3=high)
linkarraySocial links: [{label, link}]
tokenTagobjectToken tags by category

API 4: Meme Rank

Method: GET

URL:

https://web3.binance.com/bapi/defi/v1/public/wallet-direct/buw/wallet/market/token/pulse/exclusive/rank/list/ai

Headers: Accept-Encoding: identity

Request Parameters:

ParameterTypeRequiredDescription
chainIdstringYesChain ID: 56 (BSC)

Returns top 100 meme tokens launched via Pulse platform, scored and ranked by an algorithm evaluating breakout potential.

Example Request

curl 'https://web3.binance.com/bapi/defi/v1/public/wallet-direct/buw/wallet/market/token/pulse/exclusive/rank/list/ai?chainId=56' \
-H 'Accept-Encoding: identity' \
-H 'User-Agent: binance-web3/2.1 (Skill)'

Response (data.tokens[])

FieldTypeDescription
chainIdstringChain ID
contractAddressstringContract address
symbolstringToken symbol
rankintegerRank position
scorestringAlgorithm score (higher = more likely to break out)
alphaStatusintegerAlpha listing status
pricestringCurrent price (USD)
percentChangestringPrice change (%)
percentChange7dstring7-day price change (%)
marketCapstringMarket cap (USD)
liquiditystringLiquidity (USD)
volumestringTotal volume (USD)
volumeBnTotalstringBinance user total volume
volumeBn7dstringBinance user 7-day volume
holdersstringTotal holder count
kycHoldersstringKYC holder count
bnUniqueHoldersstringBinance unique holder count
holdersTop10PercentstringTop10 holder percentage
countintegerTotal transaction count
countBnTotalintegerBinance user total tx count
countBn7dintegerBinance user 7-day tx count
uniqueTraderBnintegerBinance unique traders
uniqueTraderBn7dintegerBinance 7-day unique traders
impressionintegerImpression/view count
createTimenumberToken creation timestamp (ms)
migrateTimenumberMigration timestamp (ms)
metaInfo.iconstringIcon URL path (prefix https://bin.bnbstatic.com)
metaInfo.namestringToken full name
metaInfo.decimalsintegerToken decimals
metaInfo.aiNarrativeFlagintegerAI narrative flag (1=yes)
previewLinkobjectSocial links: {website[], x[], telegram[]}
tokenTagobjectToken tags by category

API 5: Address Pnl Rank

Method: GET

URL:

https://web3.binance.com/bapi/defi/v1/public/wallet-direct/market/leaderboard/query/ai

Headers: Accept-Encoding: identity

Request Parameters:

ParameterTypeRequiredDescription
chainIdstringYesChain ID: 56 (BSC), CT_501 (Solana)
periodstringYesTime period: 7d, 30d, 90d
tagstringYesAddress tag filter: ALL, KOL
sortByintegerNoSort field
orderByintegerNoOrder direction
pageNointegerNoPage number (min 1)
pageSizeintegerNoPage size (max 25)

Filter Parameters (Min/Max pairs):

FilterTypeDescription
PNLMin/MaxdecimalRealized PnL range (USD)
winRateMin/MaxdecimalWin rate range (percentage, e.g. 1 = 1%)
txMin/MaxlongTransaction count range
volumeMin/MaxdecimalVolume range (USD)

Example Request

curl 'https://web3.binance.com/bapi/defi/v1/public/wallet-direct/market/leaderboard/query/ai?tag=ALL&pageNo=1&chainId=CT_501&pageSize=25&sortBy=0&orderBy=0&period=30d' \
-H 'Accept-Encoding: identity' \
-H 'User-Agent: binance-web3/2.1 (Skill)'

Response

{
  "code": "000000",
  "data": {
    "data": [{ "..." }],
    "current": 1,
    "size": 25,
    "pages": 35
  },
  "success": true
}

Address Fields (data.data[]):

FieldTypeDescription
addressstringWallet address
addressLogostringAddress avatar URL
addressLabelstringAddress display name
balancestringOn-chain balance (native token, e.g. SOL/BNB)
tagsarrayAddress tags (e.g. KOL)
realizedPnlstringRealized PnL for the period (USD)
realizedPnlPercentstringRealized PnL percentage
dailyPNLarrayDaily PnL list: [{realizedPnl, dt}]
winRatestringWin rate for the period
totalVolumestringTotal trading volume (USD)
buyVolume / sellVolumestringBuy / Sell volume
avgBuyVolumestringAverage buy amount
totalTxCntintegerTotal transaction count
buyTxCnt / sellTxCntintegerBuy / Sell transaction count
totalTradedTokensintegerNumber of tokens traded
topEarningTokensarrayTop profit tokens: [{tokenAddress, tokenSymbol, tokenUrl, realizedPnl, profitRate}]
tokenDistributionobjectPnL distribution: {gt500Cnt, between0And500Cnt, between0AndNegative50Cnt, ltNegative50Cnt}
lastActivitynumberLast active timestamp (ms)
genericAddressTagListarrayDetailed tag info (tagName, logoUrl, extraInfo)

User Agent Header

Include User-Agent header with the following string: binance-web3/2.1 (Skill)

Notes

  1. Icon/logo URLs require prefix: https://bin.bnbstatic.com + path
  2. Unified Token Rank supports both GET and POST; POST is recommended
  3. All numeric fields in responses are strings — parse when needed
  4. Period fields use shorthand: {1m,5m,1h,4h,24h} means separate fields like percentChange1m, percentChange5m, etc.

Comments

Loading comments...