Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

x402 Crypto Market Structure

v1.2.0

Real-time crypto market intelligence — live orderflow from 20 exchanges, directional regime detection, 7 years of OHLCV with buy/sell flow baked in, and on-c...

0· 148·0 current·0 all-time
byTunedfor@tunedforai

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for tunedforai/x402-market-structure.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "x402 Crypto Market Structure" (tunedforai/x402-market-structure) from ClawHub.
Skill page: https://clawhub.ai/tunedforai/x402-market-structure
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install x402-market-structure

ClawHub CLI

Package manager switcher

npx clawhub@latest install x402-market-structure
Security Scan
Capability signals
CryptoRequires walletRequires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (real-time crypto orderflow, history, address risk) aligns with the listed tool calls (market_snapshot, market_orderflow, history_*, address_risk). Registering a remote MCP server is consistent with providing those tool endpoints. However, the skill has no homepage or known publisher and the MCP host is an unknown third party (tunedfor.ai), so the provenance is unclear.
!
Instruction Scope
The SKILL.md explicitly instructs the user to run a CLI command that adds a remote MCP server ('openclaw mcp set x402-market-structure ...') and to restart the gateway so the new tools appear system-wide. That action changes agent configuration and grants the remote MCP the ability to provide native tools; the document also tells the agent to call native functions provided by that server. The instructions do not show the actual API responses or any verification steps beyond calling api_info().
Install Mechanism
This is an instruction-only skill with no install spec and no code files — nothing is downloaded or written by the skill bundle itself. Risk arises from the device-level configuration change the instructions ask you to perform, not from bundled install artifacts.
Credentials
The skill declares no required environment variables, credentials, or config paths. It does not request AWS keys or other secrets. That is proportionate to the described function. Note: granting an external MCP server is an implicit network/trust requirement even without explicit secrets.
!
Persistence & Privilege
always is false (good) and the skill does not itself set persistent flags, but the setup step modifies the agent's MCP configuration (a persistent change) and requires a gateway restart. After registration, the remote server can supply tool functions that the agent will call; that is a powerful capability and effectively grants ongoing influence to the external service until you remove it.
What to consider before installing
This skill reasonably claims to provide market data, but it requires you to add an external MCP server (https://x402.tunedfor.ai/mcp) to your agent and restart the gateway so that server can push native tools into your tool list. Before running that command: 1) verify the operator (tunedfor.ai) and the registry owner out-of-band — there's no homepage or known publisher in the metadata; 2) run api_info() first (or call the MCP in a sandboxed/test instance) to inspect returned endpoints and pricing without giving the server ongoing access to your main agent; 3) avoid registering the MCP on any agent that has access to sensitive credentials or systems; 4) if you proceed, consider restricting network egress or using an isolated agent/gateway instance so the remote provider cannot act on other tools or data; 5) remove the MCP entry and restart the gateway if behavior is unexpected. The lack of code in the skill bundle means the risk comes from trusting the remote MCP — treat that trust decision as the primary risk." }

Like a lobster shell, security has layers — review code before you run it.

latestvk976mwf8zgr98yjj4rmk0spy5584vg2c
148downloads
0stars
6versions
Updated 1w ago
v1.2.0
MIT-0

x402 Crypto Market Structure

Live crypto market intelligence. Call tools directly — no web fetch, no wallet needed.

Tools are native function calls

After MCP registration, these tools appear in your tool list. Call them directly:

Call thisTo get
market_snapshot(token="BTC")Price, funding rate, CVD, whale activity, liquidation pressure
market_analyze(token="ETH")Macro regime, directional signal + confidence, DXY, VIX, fear/greed
market_orderflow(token="SOL")Cross-exchange CVD direction, buy/sell ratio, wash trading flag
market_full(token="BTC")Everything above + LLM verdict (BULLISH/BEARISH, risk level, one-line summary)
address_risk(address="0x...")Entity label, risk level, account age, holdings (EVM or Solana)
history_1h(token="BTC", start="2025-01-01", end="2025-02-01")Hourly OHLCV + buy/sell flow
history_1d(token="BTC", start="2024-01-01", end="2025-01-01")Daily OHLCV + buy/sell flow
history_5m(token="BTC")5-min bars, last 17 days
api_info()REST API pricing + autonomous agent setup (no cost)

Do not call /demo or fetch web pages for market data. The tools above return live data. /demo is a cached example only.


Token coverage

15 tokens (market_snapshot, market_analyze, market_full): BTC ETH SOL XRP BNB DOGE ADA AVAX LINK ATOM DOT ARB SUI OP LTC

24 tokens (market_orderflow, history_*): All 15 above + NEAR TRX BCH SHIB HBAR TON XLM UNI AAVE


Trigger patterns

  • "what is bitcoin doing" → market_snapshot(token="BTC")
  • "should I buy ETH" → market_full(token="ETH")
  • "is this SOL move real" → market_orderflow(token="SOL")
  • "check macro before trading" → market_analyze(token="BTC")
  • "who is this wallet" → address_risk(address="<address>")
  • "BTC hourly bars for January" → history_1h(token="BTC", start="2025-01-01", end="2025-02-01")
  • "how do I run this 24/7 / autonomous" → api_info()

Signal interpretation

FieldMeaning
cvd_direction = "up"More buying than selling across exchanges
buy_ratio > 0.55Buyers dominating order flow
whale_bar_count_1h > 3Significant large-order activity in the last hour
liquidation_sell_1h highForced long liquidations — cascade risk
volume_herfindahl > 0.6Volume in 1-2 venues — possible wash trading
exchanges_accumulating < 8Weak breadth — fewer than 8/20 venues buying
macro_regime = "risk_off"Macro unfavorable for longs
risk_level = "CRITICAL"Do not enter. Wait for conditions to normalize.
stale: trueData >10 min old — treat with skepticism

Setup (run once — skip if already registered)

If tools are not in your tool list, register the MCP server:

openclaw mcp set x402-market-structure '{"type":"streamable-http","url":"https://x402.tunedfor.ai/mcp"}'

Then restart your gateway to pick up the new server. After restart, the tools will be available.

To verify tools loaded: call api_info() — it should return REST pricing info. If it errors or is missing, the gateway needs a restart.

No API key or wallet needed for MCP tools. Rate-limited (free tier). For 24/7 autonomous use without rate limits, call api_info() for REST setup.


REST API

Base URL: https://x402.tunedfor.ai — call api_info() for pricing and autonomous setup.

Comments

Loading comments...