Crypto Threshold Watcher

Monitor any crypto token against configurable price/volume thresholds. Fires alerts when entry conditions are met. Use when you need proactive notification t...

Security Scan

The skill's instructions reference local node scripts, a workspace path, and automatic Telegram alerts but the package provides no code, no declared binaries or credentials, and gives incomplete setup details — these mismatches are concerning.

Purpose & Capability

The described purpose (monitor tokens, fire alerts) is reasonable, but the SKILL.md expects a node script at ~/.openclaw/workspace/scripts/trading/threshold-watcher.js and a watchlist file at ~/.openclaw/workspace/trading/watchlist.json that are not included or declared. The skill does not declare 'node' as a required binary even though its usage is central.

Instruction Scope

Runtime instructions tell the agent to run local node scripts, read/write files under ~/.openclaw, add cron entries, and deliver alerts to Telegram. These actions access user filesystem and external networks and require credentials/configuration not described in the SKILL.md, giving the agent broad scope without clear limits.

Install Mechanism

There is no install spec (instruction-only), which minimizes what the skill writes to disk. However, being instruction-only here also means it assumes existing local scripts and config are present — a dependency mismatch rather than an installation risk.

Credentials

No environment variables or credentials are declared, yet the SKILL.md promises automatic Telegram DM delivery (which requires a bot token/chat ID) and uses APIs that may need rate/credential handling. The absence of declared env vars (e.g., TELEGRAM_TOKEN) and the undeclared need for 'node' are disproportionate to what is documented.

Persistence & Privilege

The skill is not always-enabled and does not request special platform privileges. Still, it instructs adding a cron task and automatic alerting to Telegram — persistent behavior but initiated by user configuration rather than an 'always' flag.

Scan Findings in Context

[no-findings] expected: Regex scanner found nothing. This is expected because the skill is instruction-only and contains no code files for static analysis; the security signal must come from inspecting SKILL.md content instead.

What to consider before installing

Do not install or enable this skill until you confirm the missing pieces. Specifically: (1) Verify whether the referenced script (~/.openclaw/workspace/scripts/trading/threshold-watcher.js) and watchlist file exist and review their source code — the skill provides no code. (2) Confirm you have 'node' installed and on PATH (the SKILL.md assumes node but doesn't declare it). (3) Ask where Telegram delivery is configured; automatic DM delivery requires a bot token and chat ID (sensitive secrets) but none are declared. (4) If you plan to add the cron entry, review the script's behavior and ensure it does only the expected API calls and writes only to intended files. (5) Prefer a version of this skill that includes its implementation or clear installation instructions and declares required binaries/env vars; if the author provides the missing code and explicit credential requirements, the assessment can be revised to benign.

Proactive alert engine for any token on any exchange. Checks watchlist against configurable thresholds and fires signals.

Watchlist Config

Stored at: ~/.openclaw/workspace/trading/watchlist.json

{
  "tokens": [
    {
      "symbol": "GRASSUSDT",
      "exchange": "binance",
      "thresholds": {
        "price_above": 0.30,
        "price_below": 0.20,
        "volume_24h_above": 50000000
      },
      "notes": "AI data network — entry above $0.30"
    },
    {
      "symbol": "FETUSDT",
      "exchange": "binance",
      "thresholds": {
        "price_above": 0.20,
        "volume_24h_above": 100000000
      },
      "notes": "ASI Alliance token — volume spike = breakout signal"
    }
  ]
}

Usage

Check all watchlist tokens

node ~/.openclaw/workspace/scripts/trading/threshold-watcher.js

Add a token to watchlist

node ~/.openclaw/workspace/scripts/trading/threshold-watcher.js --add --symbol BTCUSDT --price-above 90000

Check single token

node ~/.openclaw/workspace/scripts/trading/threshold-watcher.js --symbol ETHUSDT

Output

When threshold is crossed:

🚨 THRESHOLD ALERT — GRASSUSDT
  Price: $0.3245 (threshold: $0.30 ↑)
  Volume 24h: $62.3M
  Signal: ENTRY — price above threshold
  Time: 2026-03-17 18:30 UTC
  Notes: AI data network — entry above $0.30

When no threshold crossed:

✅ GRASSUSDT — $0.28 (below $0.30 threshold, watching)

Data Sources

• Primary: Binance API (no auth required for market data)
• Fallback: CoinGecko API (free tier)

Cron Integration

Add to TASKS.md cron:

Every 1h: node scripts/trading/threshold-watcher.js

Alerts delivered to Telegram DM automatically.

Threshold Types

Type	Field	Description
Price breakout	price_above	Price crosses above level
Price breakdown	price_below	Price drops below level
Volume spike	volume_24h_above	24h volume exceeds threshold
RSI overbought	rsi_above	RSI > value (requires OHLC data)
RSI oversold	rsi_below	RSI < value

Integration with Trading Pipeline

This skill feeds signals to:

• backtest-expert — validate signal before acting
• skill-trading-journal — log signal + decision
• binance-pro — execute if approved