ClawHub

Harena

v0.3.3

AI 交易信息工作台 | AI Trading Intelligence Workbench. 24/7 市场监控、新闻分析、交易信号、智能预警，通过 MCP 协议接入 Claude/OpenClaw 等 AI 助手。触发词：市场分析、每日简报、交易信号、突发事件、行情监控、trading signals、mar...

⭐ 1· 91·0 current·0 all-time
byZZ@wall-e
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
CryptoRequires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (market data, news, alerts) align with required HARENA_API_KEY and MCP-based tool calls. Asking for a single API key is expected for a third‑party market data service.
✓
Instruction Scope
SKILL.md only instructs the agent to call Harena via the documented MCP tools and to provide the service API key. It does not direct the agent to read unrelated files, other credentials, or system state. The explicit rule to avoid raw HTTP (curl/fetch) is restrictive but consistent with the described MCP integration.
✓
Install Mechanism
Instruction-only skill with no install spec or code files — nothing is written to disk or fetched during install. Low install risk.
✓
Credentials
Only one environment variable (HARENA_API_KEY) is required and declared as primary. That is proportionate to a remote API service. No unrelated secrets or config paths are requested.
✓
Persistence & Privilege
always is false and the skill is user-invocable; it does not request persistent elevated privileges or modification of other skills. Autonomous invocation is allowed (platform default) but not excessive here.
Assessment
This skill appears internally consistent, but you should only install it if you trust https://harena.world. Before installing: (1) verify the service's documentation and privacy/terms to confirm API keys are read-only and no trading keys are required; (2) create and use a scoped/test API key (not your primary secrets); (3) review MCP server URL in your client config to ensure it matches the official domain (examples show both harena.world and www.harena.world); and (4) monitor usage/quotas after enabling the skill. If you need higher assurance, ask the publisher for security docs or an audit showing the API key is used for read-only access only.

Like a lobster shell, security has layers — review code before you run it.

chinesevk973qk2httj8e8c4914p15dkjs84tmj0cryptovk973qk2httj8e8c4914p15dkjs84tmj0financevk973qk2httj8e8c4914p15dkjs84tmj0latestvk976r1245hk76d24y5q9wmy6hx84wq57market-datavk973qk2httj8e8c4914p15dkjs84tmj0mcpvk973qk2httj8e8c4914p15dkjs84tmj0signalsvk973qk2httj8e8c4914p15dkjs84tmj0tradingvk973qk2httj8e8c4914p15dkjs84tmj0

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📊 Clawdis
EnvHARENA_API_KEY
Primary envHARENA_API_KEY

Comments