TrueNorth Crypto Intelligence
v0.4.0TrueNorth crypto market intelligence: technical analysis (RSI, MACD, Bollinger Bands), derivatives (funding rates, open interest), DeFi (TVL, fees), token pe...
⭐ 2· 326·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (crypto market intelligence) matches the declared binary 'tn' and the npm package @truenorth-ai/cli that installs that binary. The capabilities listed (TA, derivatives, DeFi, etc.) align with the CLI commands shown in examples.md.
Instruction Scope
SKILL.md and examples.md consistently instruct the agent to run the local 'tn' CLI which calls the public API (api.adventai.io) and to use --json for structured output. This stays within the described purpose. One privacy note: the recommended workflow sends the user's original message to 'tn ner "<user message>"' — any sensitive information contained in user prompts would be transmitted to the public API. The skill does not ask for other files, env vars, or unrelated system data.
Install Mechanism
Install uses a public npm package (@truenorth-ai/cli@latest) that creates the 'tn' binary (global install). This is expected for a CLI skill but carries the usual npm risk (package/content could change upstream). No downloads from untrusted URLs or archive extracts are used.
Credentials
The skill requests no environment variables, no credentials, and no config paths. That is proportionate to a read-only market-intelligence CLI.
Persistence & Privilege
always is false and the skill does not request elevated or persistent system privileges. It installs a user-level CLI binary (normal for this kind of tool) and does not modify other skills or system-wide settings.
Assessment
This skill appears coherent and matches its stated purpose. Before installing, consider these precautions: (1) Review the npm package and its GitHub source (advent-ai/truenorth-cli) to confirm maintainership and inspect code changes; (2) Be aware that queries (including the full user message) are sent to the public API — avoid including secrets, private keys, or personal data in prompts; (3) If you need stronger isolation, run the tn CLI in a restricted environment or container rather than installing globally; (4) Monitor the npm package for updates and pinned versions to avoid unexpected upstream changes. If you want, I can fetch the package metadata (maintainer, weekly downloads, SHA of the latest version) or link the repository for manual review.Like a lobster shell, security has layers — review code before you run it.
latestvk97bvs6j0whgy1qscnqvqv98rs82cwsq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📈 Clawdis
Binstn
Install
Install TrueNorth CLI (npm)
Bins: tn
npm i -g @truenorth-ai/cli@latest