ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Crypto Funding Alert

v1.0.1

Real-time crypto funding rate scanner with smart alerts. Finds negative funding rates for profitable long positions. Supports Binance futures. No API key nee...

⭐ 0· 1.3k·6 current·7 all-time
by@dagangtj
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (Binance funding-rate scanner) align with the code and SKILL.md. The skill only requires Node and uses public Binance futures endpoints; no API keys or unrelated services are requested.
ℹ
Instruction Scope
SKILL.md and scan.js confine actions to polling public Binance endpoints and saving JSONL logs under the user's OpenClaw workspace. Example integrations mention Discord/Telegram/webhooks but these are optional examples (not required env vars) — be mindful if you wire in webhook tokens.
✓
Install Mechanism
No install spec; instruction-only skill with a included scan.js. Nothing is downloaded or extracted at install time.
✓
Credentials
The skill declares no required environment variables or credentials. It reads process.env.HOME to construct a local path (expected). Example snippets reference DISCORD_WEBHOOK/other tokens only as optional integrations and are not required by the skill itself.
✓
Persistence & Privilege
always is false and the skill does not modify other skills or system-wide settings. It writes logs to ~/.openclaw/workspace/data/funding-monitor (its own data area), which is proportional to its functionality.
Assessment
This skill appears coherent and limited to scanning public Binance futures endpoints and writing local logs. Before installing: (1) review any webhook/cron automation you add — webhook tokens are not required by the skill and should be kept secret; (2) run the scanner manually first and inspect output files under ~/.openclaw/workspace/data/funding-monitor; (3) never supply exchange API keys unless a different tool explicitly needs them; and (4) remember this is an informational scanner, not an automated trader — do not auto-execute trades without additional safeguards and review of trading risk.

Like a lobster shell, security has layers — review code before you run it.

latestvk975mm1azwb1tqmjc37vsydkn981x38w

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binsnode

Comments