Crypto Alert Agent
PassAudited by ClawScan on May 1, 2026.
Overview
The skill is purpose-aligned for crypto alerts, but it needs Telegram setup and refers to a helper script that is not included.
Before installing, confirm that you trust any run.sh implementation you add or obtain separately, keep Telegram credentials secure, verify the destination chat ID, and be comfortable with portfolio data being stored and sent through Telegram.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill may not work as installed, and any separately obtained run.sh script would determine the real runtime behavior.
The supplied manifest/code presence information says only SKILL.md is present and no code files or install spec are supplied, so the referenced helper script is absent from the reviewed artifacts.
All commands are executed via the `run.sh` script.
Do not create or schedule a run.sh script unless it comes from a trusted, reviewed source; the package should ideally include the helper script or document its provenance.
A Telegram bot token and chat ID could be used to send messages to the configured Telegram chat.
The skill asks for Telegram messaging identity/configuration even though the registry metadata declares no primary credential or required environment variables; this is expected for Telegram alerts but should be noticed.
Create a file named `telegram_chat_id` inside the `{baseDir}/credentials/` directory... Ensure your OpenClaw instance is configured with a Telegram bot tokenStore the Telegram token and chat ID securely, verify the chat ID, and use a bot with only the permissions needed for notifications.
Your holdings or portfolio value may be stored by the skill’s implementation and may appear in Telegram messages.
Portfolio holdings and values are personal financial data and appear intended to persist across scheduled checks and potentially be sent through Telegram.
Add your crypto holdings to track their total value in real-time... (Optional) Send a periodic portfolio value update.
Only enter portfolio details you are comfortable storing and messaging through Telegram, and confirm where any implementation stores this data.
If scheduled, it can keep polling prices and sending notifications without further prompts.
The skill recommends recurring background execution, which is expected for alert monitoring but creates ongoing activity until disabled.
run on a schedule (e.g., via a cron job or a persistent agent loop)... Every 5 minutes.
Set up the schedule only if you want continuous monitoring, and keep a clear way to disable the cron job or persistent loop.