Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

CyptoDataVault

v1.0.0

Provides real-time cryptocurrency prices, on-chain Ethereum data, and DeFi metrics via unified API access to multiple exchanges and protocols.

0· 67·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for wangshuniguang/cyptodatavault.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "CyptoDataVault" (wangshuniguang/cyptodatavault) from ClawHub.
Skill page: https://clawhub.ai/wangshuniguang/cyptodatavault
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install cyptodatavault

ClawHub CLI

Package manager switcher

npx clawhub@latest install cyptodatavault
Security Scan
Capability signals
CryptoRequires walletRequires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill claims 13 tools and multi-exchange/on-chain access. That purpose would reasonably need network access and optionally blockchain API keys (Etherscan etc.). However the package is internally inconsistent: SKILL.json and SKILL.md list fastapi/uvicorn and ccxt, but requirements.txt omits fastapi/uvicorn; config/default.yaml lists DATAVAULT_API_KEY and many scan keys but the registry metadata declares no required envs. The code references app.* modules (app.data, app.onchain) which are not present in the provided file manifest, indicating the bundle is incomplete or mispackaged. These mismatches make it unclear what the skill actually does or needs.
!
Instruction Scope
SKILL.md itself provides narrowly scoped instructions for calling tools (get_price, get_eth_balance, etc.). But contained scripts (scripts/test.sh, scripts/setup.sh) instruct running tests and imports that reference a different package layout (they import from src and assert >=50 tools), and test assertions expect many more tools/fields than SKILL.md documents. The scripts also create a .env template and encourage adding API keys. The run instructions and tests therefore go beyond the documented skill surface and conflict with the packaged code.
Install Mechanism
There is no formal install spec (instruction-only), which is lower risk. The included setup script uses pip install -r requirements.txt and creates a virtualenv; requirements.txt contains common packages (requests, pyyaml, ccxt) and no external downloads or obscure URLs. However SKILL.json declares additional dependencies (fastapi, uvicorn) that are not reflected in requirements.txt, which is inconsistent and could lead to missing runtime packages if followed as-is.
Credentials
The skill declares no required environment variables in registry metadata, and SKILL.md says optional ETHERSCAN_API_KEY. Yet config/default.yaml and setup scripts include DATAVAULT_API_KEY and many blockchain scan keys (ETHERSCAN, BSCSCAN, POLYGONSCAN, ARBITRUMSCAN). Requesting those API keys would be proportionate for on-chain features, but the fact they are present in config but not declared in metadata is an inconsistency the user should notice before supplying secrets.
Persistence & Privilege
The skill does not request elevated persistence: always is false and it does not declare creating system-wide config or modifying other skills. It requests network access (per SKILL.json metadata), which is expected for a data provider.
What to consider before installing
This package appears mispackaged and inconsistent rather than overtly malicious, so proceed cautiously. Specific things to check before installing or running: - The repository is missing the referenced app/ modules (app.data, app.onchain). Ask the author for the complete package or the correct import layout (src vs skill vs app). - Dependency mismatch: SKILL.json lists fastapi/uvicorn but requirements.txt does not. Confirm which packages are actually needed and install in an isolated virtualenv or sandbox. - Tests/scripts refer to a different package name (src) and expect many more tools/fields than documented; these tests may fail or be lying about capabilities. Don't trust the test assertions as evidence of capability. - The bundle will ask you to create a .env with API keys (Etherscan, DATAVAULT_API_KEY). Only provide low-privilege/test keys first and never supply high-value credentials without verifying the code. - Run the code in an isolated environment (container or VM), inspect the missing app modules and network endpoints the code calls, and verify the GitHub link and publisher identity before granting network access or secrets. If you can't verify these items or get a corrected package/source, treat the skill as untrusted and avoid installing it into production or on machines holding sensitive credentials.

Like a lobster shell, security has layers — review code before you run it.

latestvk971zrms19gr27f8haybrvnf3n84tk3k
67downloads
0stars
1versions
Updated 1w ago
v1.0.0
MIT-0

DataVault Skill

📊 DataVault - 全球领先的 Web3 Data Value 平台

Empowering AI Agents with Institutional-Grade Crypto Market Data

Overview

DataVault is a comprehensive cryptocurrency market data infrastructure that provides unified access to multi-source market data through a standardized API layer. This skill exposes 13 core tools for AI agents to access real-time crypto prices, on-chain data, and DeFi metrics.

With 101+ MCP Tools under the hood, DataVault connects to:

  • 5+ Exchanges: Binance, OKX, Bybit, Bitget, Gate.io
  • On-Chain Networks: Ethereum, BSC, Solana, Polygon, Arbitrum
  • DeFi Protocols: DeFi Llama, CoinCap

Features

CategoryToolsDescription
Market Data5Real-time prices, funding rates, market summary
On-Chain3ETH balance, transactions, gas prices
DeFi5TVL, yields, stablecoins
Core101+MCP Tools total

Quick Start

from skill import call_tool

# Get Bitcoin price
result = call_tool("get_price", symbol="BTC/USDT")
print(result)
# {"symbol": "BTC/USDT", "last": 74536.1, "bid": 74530.0, "ask": 74540.0, ...}

Tools Reference

Market Data Tools

get_price

Get real-time price for a cryptocurrency symbol.

call_tool("get_price", symbol="BTC/USDT")
call_tool("get_price", symbol="ETH/USDT")
ParameterTypeRequiredDescription
symbolstringYesTrading symbol (e.g., "BTC/USDT")
exchangestringNoSpecific exchange

get_all_prices

Get all available market prices.

call_tool("get_all_prices")

get_funding_rate

Get funding rate for a symbol.

call_tool("get_funding_rate", symbol="BTC/USDT")

get_market_summary

Get market overview with top gainers/losers.

call_tool("get_market_summary")

get_best_price

Find best price across all exchanges.

call_tool("get_best_price", symbol="BTC/USDT")

On-Chain Tools

get_eth_balance

Get ETH balance for an address.

call_tool("get_eth_balance", address="0xd8dA6BF26964aF9D7eEd002fE87A6555f0aBc6f8")
ParameterTypeRequiredDescription
addressstringYesEthereum wallet address

get_eth_transactions

Get transaction history for an address.

call_tool("get_eth_transactions", address="0xd8dA6BF26964aF9D7eEd002fE87A6555f0aBc6f8", limit=20)

get_gas_price

Get current Ethereum gas prices.

call_tool("get_gas_price")

DeFi Tools

get_defi_tvl

Get DeFi total value locked rankings.

call_tool("get_defi_tvl")
call_tool("get_defi_tvl", chain="ethereum")

get_protocol_tvl

Get TVL for a specific protocol.

call_tool("get_protocol_tvl", protocol="aave")
call_tool("get_protocol_tvl", protocol="makerdao")

get_chain_tvl

Get TVL rankings by blockchain.

call_tool("get_chain_tvl")

get_yields

Get yield farming data.

call_tool("get_yields")
call_tool("get_yields", protocol="aave")

get_stablecoins

Get stablecoin market data.

call_tool("get_stablecoins")

Usage Examples

Example 1: Get Bitcoin Price

Input: What's the current BTC price?

AI Response:
call_tool("get_price", symbol="BTC/USDT")
→ Returns: {"symbol": "BTC/USDT", "last": 74536.1, ...}
→ "BTC is currently trading at $74,536.10"

Example 2: Check Vitalik's ETH Balance

Input: How much ETH does Vitalik have?

AI Response:
call_tool("get_eth_balance", address="0xd8dA6BF26964aF9D7eEd002fE87A6555f0aBc6f8")
→ Returns: {"eth_value": 2445.32, "usd_value": 18170000}
→ "Vitalik has approximately 2,445 ETH (~$18M)"

Example 3: Check Gas prices

Input: Should I send ETH now or wait for cheaper gas?

AI Response:
call_tool("get_gas_price")
→ Returns: {"fast": 30, "standard": 25, "slow": 20}
→ "Current gas: Fast 30 gwei, Standard 25 gwei. 
   Consider waiting if not urgent."

Configuration

Environment Variables

Optional - works out of the box without config:

# .env (optional)
ETHERSCAN_API_KEY=your_key

Required Python Packages

requests>=2.31.0
ccxt>=4.3.0
fastapi>=0.109.0
uvicorn>=0.27.0

Testing

# Verify skill works
python -c "from skill import get_skill; print(get_skill().health())"

# Test a tool
python -c "from skill import call_tool; print(call_tool('get_price', symbol='BTC/USDT'))"

License

MIT License


Links


Built with ❤️ for the Web3 AI community

Version: 1.1.0
Last Updated: 2026-04-14

Comments

Loading comments...