ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Crypto Chart

v1.0.0

Get cryptocurrency token price and generate candlestick charts via CoinGecko API or Hyperliquid API. Use when user asks for token price, crypto price, price...

⭐ 0· 72·0 current·0 all-time
by@redf426

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for redf426/crypto-chart.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Crypto Chart" (redf426/crypto-chart) from ClawHub.
Skill page: https://clawhub.ai/redf426/crypto-chart
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required binaries: python3
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install crypto-chart

ClawHub CLI

Package manager switcher

npx clawhub@latest install crypto-chart
Security Scan
Capability signals
Crypto
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the actual behavior: the script fetches price/ohlc data from CoinGecko and Hyperliquid, caches results, and renders PNG candlestick charts. Required binary (python3) and Python dependency (matplotlib) are appropriate and proportionate.
✓
Instruction Scope
SKILL.md instructs only how to run the included script, copy the generated PNG into the workspace, send it via the message tool, and clean up. The instructions do not direct reading unrelated files, require extra credentials, or send data to unexpected endpoints. Note: outputs and caches are written to /tmp as documented.
✓
Install Mechanism
No install spec (instruction-only) and a small requirements.txt (matplotlib) — low-risk. The code is bundled with the skill rather than downloaded at runtime; nothing is fetched from untrusted installers during install.
✓
Credentials
The skill requests no environment variables, no credentials, and no config paths beyond /tmp for cache and chart files. Network access to api.coingecko.com and api.hyperliquid.xyz is required and consistent with the described data sources.
✓
Persistence & Privilege
always:false and no self-modifying or cross-skill configuration. The skill does not request permanent elevated presence or access to other skills' configuration.
Assessment
This skill appears coherent and implements what it says: it needs python3 and matplotlib, and it fetches data from CoinGecko and Hyperliquid and writes caches/charts to /tmp. Before installing: ensure you are comfortable allowing outbound network calls to those APIs; confirm you will install matplotlib from a trusted source (pip); be aware that files are created in /tmp which on multi-user hosts can be readable by others; the SKILL.md mandates cleanup but verify the agent reliably removes temp files (leftover files could accumulate). The script shows some duplicated function definitions (likely sloppy copy/paste) — not necessarily malicious but may indicate rough maintenance. No credentials are requested and no obvious exfiltration endpoints are present.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

📈 Clawdis
Binspython3
latestvk979hkada0ap4g234d0mhz5bsn84v8ak
72downloads
0stars
1versions
Updated 2w ago
v1.0.0
MIT-0
@redf426
latest
Download

Crypto Price & Chart

Get cryptocurrency token price and generate candlestick charts.

Usage

Execute the script with token symbol and optional duration:

python3 {baseDir}/scripts/get_price_chart.py <SYMBOL> [duration]

Examples:

  • python3 {baseDir}/scripts/get_price_chart.py HYPE
  • python3 {baseDir}/scripts/get_price_chart.py HYPE 12h
  • python3 {baseDir}/scripts/get_price_chart.py BTC 3h
  • python3 {baseDir}/scripts/get_price_chart.py ETH 30m
  • python3 {baseDir}/scripts/get_price_chart.py SOL 2d

Duration format: 30m, 3h, 12h, 24h (default), 2d

Output

Returns JSON with:

  • price - Current price in USD/USDT
  • change_period_percent - Price change percentage for the period
  • chart_path - Path to generated PNG chart (if available)
  • text_plain - Formatted text description

Chart as image (always when chart_path is present): In OpenClaw, send the image via message tool (not plain text placeholder):

  1. Copy from /tmp to workspace: cp <chart_path> ./crypto_chart_<SYMBOL>_<duration>.png
  2. Send: message(action="send", filePath="./crypto_chart_<SYMBOL>_<duration>.png", message="<text_plain>")
  3. MANDATORY cleanup — run both commands regardless of send result:
    • rm ./crypto_chart_<SYMBOL>_<duration>.png
    • rm <chart_path>
  4. Reply NO_REPLY.

Do not skip step 3. Files left in workspace accumulate and waste disk space.

Chart Details

  • Format: Candlestick chart (8x8 square)
  • Theme: Dark (#0f141c background)
  • Output: /tmp/crypto_chart_{SYMBOL}_{timestamp}.png

Data Sources

  1. Hyperliquid API - For HYPE and other Hyperliquid tokens (preferred)
  2. CoinGecko API - Fallback for other tokens

Price data cached for 300 seconds (5 minutes) in /tmp/crypto_price_*.json.

Comments

Loading comments...