Isma Airdrop Finder

Automated crypto airdrop discovery and daily market analysis. Finds high-funding projects, tracks market structure, support/resistance, and macro news. No AP...

Security Scan

The skill mostly matches its stated purpose (market reports + airdrop alerts) and makes only limited network calls, but it claims live data sourcing (DefiLlama/Crunchbase) while the airdrop generator uses a hard-coded sample dataset—this mismatch and the included automation/cron suggestions warrant caution.

Purpose & Capability

The name/description (airdrop discovery + market analysis) aligns with the included scripts: market_daily_report.js and heartbeat_check.js fetch public CoinGecko data and generate market reports; generate_airdrop_report.js produces airdrop reports. HOWEVER the airdrop script uses a static, hard-coded sampleAirdrops array instead of actually calling DefiLlama/Crunchbase/other sources despite SKILL.md claiming 'Airdrop Data: Manual tracking + DefiLlama' and 'Finds projects with big funding ($5M+) from top VCs.' That claim-to-implementation gap is notable: the skill does not actually perform live airdrop discovery as described.

Instruction Scope

SKILL.md instructs the agent to run Node scripts and optionally schedule them via cron; the scripts only read/write files inside the skill folder (reports/, state.json) and call public CoinGecko endpoints. There are no instructions to read unrelated system files or to access secret env vars. The README/tips recommend manual interactions with testnets/bridges (user action), which could expose user funds if followed, but the code itself does not automate wallet/bridge actions or exfiltrate data.

Install Mechanism

No install spec is provided (instruction-only install), which keeps disk/write risk low. The package includes Node.js scripts that will run with Node.js 18+ (declared requirement). There are no downloads from arbitrary URLs or extract steps. This is low-risk from an install mechanism standpoint.

Credentials

The skill declares no required environment variables or credentials and the code uses public CoinGecko endpoints (no API keys). That matches the 'No API keys required' claim. No unrelated credentials are requested.

Persistence & Privilege

The skill stores state.json and report files inside its own folder only. always:false (not forced into every agent run). The skill does not modify other skills or system-level settings. It will create/overwrite files within its directory when run.

What to consider before installing

What to consider before installing: - Functionality vs reality: The airdrop report generator currently uses a hard-coded sample dataset, so it does not appear to actually scrape DefiLlama, Crunchbase, or other live sources despite the SKILL.md claiming those sources. Treat its airdrop output as example/prototype data unless you or the author add real integrations. - Network activity: The scripts perform outgoing HTTPS calls to CoinGecko (public API) and otherwise write files to the skill folder (reports/, state.json). If you run it, expect outgoing requests and local files being created/updated. - No secrets requested: The skill does not ask for API keys or other credentials, which reduces exfiltration risk. Still review any changes before scheduling it to run automatically. - Automation & cron: SKILL.md shows cron/automation examples requiring you to cd into the skill folder. Make sure any scheduled command uses the correct absolute path and that you run the code in an account/sandbox you control. - Safety of suggested actions: The human-facing tips recommend interacting with testnets/bridges and Discord/Twitter for early rewards — these are manual actions that can put your wallet at risk if you follow instructions without careful verification. The skill will not perform wallet interactions itself, but the guidance it gives can encourage risky behavior. - If you need true live discovery: review/modify generate_airdrop_report.js to add real API calls (and then you may need API keys); audit any added network endpoints and permissions before enabling automation. Recommendation: You can run the market and heartbeat scripts for local reporting, but treat the airdrop outputs as illustrative until the code is updated to fetch/validate live sources. If you plan to schedule this skill for automated runs, inspect/modify the airdrop script to point at trusted data sources and consider running first in an isolated environment.

Crypto Airdrop Hunter & Market Reporter

v1.0.1 - Fixed: Removed external skill dependencies, self-contained state management.

Fully automated skill for crypto traders who want daily market reports and airdrop alerts without manually checking every day.

What This Skill Does

📊 Daily Market Report

• BTC/ETH price action & candle analysis
• Support & Resistance levels
• Trend detection (bullish/bearish/range)
• BTC Dominance & altcoin season signals
• Macro news with bullish/bearish labels

🎁 Airdrop Discovery

• Finds projects with big funding ($5M+) from top VCs
• Tracks projects that haven't launched tokens yet
• Monitors testnet activity & engagement opportunities
• Filters overhyped projects

🚨 Smart Monitoring

• Checks S/R proximity (alerts when within 2%)
• Tracks altcoin volatility (configurable thresholds)
• Monitors macro news events

Installation

# Clone or download this skill to your workspace
# No API keys needed - uses free CoinGecko API

# Run manually:
node scripts/market_daily_report.js
node scripts/generate_airdrop_report.js --period=weekly
node scripts/heartbeat_check.js

Configuration

Edit config.json to customize:

{
  "airdrop": {
    "minFunding": 5000000,
    "vcs": ["a16z", "Paradigm", "Sequoia", "Binance Labs", "Polychain"],
    "chains": ["ethereum", "solana", "polygon", "arbitrum", "optimism"],
    "preferredHypeLevel": ["low", "low-moderate", "moderate"]
  },
  "market": {
    "watchCrypto": ["bitcoin", "ethereum"],
    "altcoinPicks": ["hype", "mnt", "sol", "arb"]
  },
  "schedule": {
    "marketDaily": "0 0 * * *",
    "airdropWeekly": "0 0 * * 1,4"
  }
}

Setup with OpenClaw Cron

Add to your OpenClaw for automated reports. No external skills required:

// Daily market report (7am your timezone)
{
  "schedule": { "kind": "cron", "expr": "0 0 * * *" },
  "payload": { 
    "kind": "agentTurn",
    "message": "cd /path/to/crypto-airdrop-hunter && node scripts/market_daily_report.js"
  }
}

// Airdrop report (Mon & Thu)
{
  "schedule": { "kind": "cron", "expr": "0 0 * * 1,4" },
  "payload": {
    "kind": "agentTurn", 
    "message": "cd /path/to/crypto-airdrop-hunter && node scripts/generate_airdrop_report.js --period=weekly"
  }
}

State is stored in state.json within the skill folder (not external).

Scripts

Script	Purpose	Usage
market_daily_report.js	Daily market analysis	node scripts/market_daily_report.js
generate_airdrop_report.js	Airdrop discovery	node scripts/generate_airdrop_report.js --period=weekly
heartbeat_check.js	Quick monitoring	node scripts/heartbeat_check.js

Data Sources

• Market Data: CoinGecko API (free tier)
• Airdrop Data: Manual tracking + DefiLlama
• No API keys required

Output Examples

Market Report

📊 Daily Market Report - Selasa, 24 Maret 2026

BTC Price Action (24h)
💰 Current: $70,929 (+3.56%)
📈 Market Cap: $1.42T

Candlestick (24h Close)
🟢 Moderate bullish

Support & Resistance
🔴 Support: $84,800
🟢 Resistance: $88,000
📍 Midpoint: $86,400

Trend: Bullish bias
Summary: ✅ Bullish environment. Pullback ke support = buying opportunity.

Airdrop Report

📋 Laporan Airdrop - Weekly

1. Monad (L1 Blockchain)
   💰 Funding: $225M Series B
   🏦 Investor: Paradigm, a16z Crypto
   ⛓️ Chain: Solana ecosystem
   📊 Status: Private testnet, public launch Q3 2026
   📈 Hype: moderate

Requirements

• Node.js 18+
• Internet connection
• OpenClaw (optional, for automation)

License

MIT

Author

Built with OpenClaw