← Back to Skills Marketplace
bluesyparty-src

CSFloat

by bluesyparty-src · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
1043
Downloads
0
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install csfloat
Description
Queries csfloat.com for data on skins
README (SKILL.md)

CSFloat Skill

Query CSFloat skins data directly from Clawdbot.

Setup

  1. Get your API key: https://csfloat.com/profile, under the Developer tab
  2. Generate a key by pressing "New Key"
  3. Set environment variables:
    export CSFLOAT_API_KEY="your-api-key"
    

Usage

All commands use curl to hit the Trello REST API. Use the API key with the "Authorization: " header.

Get all listings

curl -s "https://csfloat.com/api/v1/listings" --header "Authorization: $CSFLOAT_API_KEY" --header "Content-Type: application/json" | jq '.data.[] | { "id", "item", "price" }'

Get specific listing

curl -s https://csfloat.com/api/v1/listings/$LISTING_ID --header "Authorization: $CSFLOAT_API_KEY" --header "Content-Type: application/json"

Create a listing

curl -X POST "https://csfloat.com/api/v1/listings" \
-H "Authorization: $LISTING_ID; Content-Type: application/json" \
-d '{"asset_id": 21078095468, "type": "buy_now", "price": 8900, "description": "Just for show", "private": false}'

Creating a listing uses the following body parameters:

Parameter Default Description Optional
type buy_now Either buy_now or auction YES
asset_id The ID of the item to list NO
price Either the buy_now price or the current bid or reserve price on an auction NO (if buy_now)
max_offer_discount Set in user profile buy_now max discount for an offer. This will override the default set in your profile. YES
reserve_price auction start price NO (if auction)
duration_days auction duration in days. Can be: 1, 3, 5, 7, or 14 NO (if auction)
description User defined description. Max characters of 180. YES
private false If true, will hide listings from public searches YES

Notes

  • Asset ids are from Steam
Usage Guidance
The skill appears to be a simple API wrapper but the SKILL.md has clear copy/paste and header formatting errors. Before installing or using it: (1) verify the API and header format in the official docs (Authorization may require a 'Bearer ' prefix or a specific header format); (2) fix the Create-listing curl to use -H "Authorization: $CSFLOAT_API_KEY" and a separate -H "Content-Type: application/json" and ensure the POST body is correct; (3) confirm $LISTING_ID is only a command-specific placeholder (not an env var) and will not be used for auth; (4) avoid running commands that echo secrets into logs or public terminals, and limit the API key scope if csfloat supports scoped keys; (5) ask the publisher to correct the SKILL.md (remove the Trello reference and fix examples) — if they cannot or will not, treat the skill as untrustworthy and do not provide your API key.
Capability Analysis
Type: OpenClaw Skill Name: csfloat Version: 1.0.0 The skill bundle is benign. It provides instructions and `curl` commands to interact with the csfloat.com API, requiring an API key. While there is a typo in the `SKILL.md` referring to 'Trello REST API' instead of 'CSFloat REST API' and a functional error in the 'Create a listing' command where `$LISTING_ID` is mistakenly used in the `Authorization` header instead of `$CSFLOAT_API_KEY`, these are functional bugs or typos, not evidence of intentional malicious behavior, data exfiltration, or prompt injection against the agent to perform actions beyond the stated purpose.
Capability Assessment
Purpose & Capability
The name/description (querying csfloat.com for skins) lines up with requiring jq and an API key. Requiring only CSFLOAT_API_KEY is proportional to the stated purpose.
Instruction Scope
The SKILL.md repeatedly contains mistakes: it says "hit the Trello REST API" (wrong service), the Create-listing example uses a malformed header (-H "Authorization: $LISTING_ID; Content-Type: application/json") and places the wrong variable in Authorization. These are copy/paste and formatting errors that could lead to incorrect requests or accidental leaks if a user supplies the wrong env var.
Install Mechanism
Instruction-only skill with no install spec — lowest risk. The only runtime dependency is jq, which is reasonable for the provided jq examples.
Credentials
Only CSFLOAT_API_KEY is declared, which is appropriate. However the instructions reference $LISTING_ID in Authorization for the POST (and use $LISTING_ID as a path variable elsewhere) without declaring it — this is inconsistent and could cause misuse if a user sets unexpected env vars.
Persistence & Privilege
Skill is not always-included, does not request persistent privileges, and does not modify other skills or system settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install csfloat
  3. After installation, invoke the skill by name or use /csfloat
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of csfloat skill - Enables querying csfloat.com for data on skins via Clawdbot - Provides setup instructions for API key configuration - Includes example commands for listing, viewing, and creating CSFloat listings - Documents required and optional parameters for listing creation
Metadata
Slug csfloat
Version 1.0.0
License
All-time Installs 2
Active Installs 2
Total Versions 1
Frequently Asked Questions

What is CSFloat?

Queries csfloat.com for data on skins. It is an AI Agent Skill for Claude Code / OpenClaw, with 1043 downloads so far.

How do I install CSFloat?

Run "/install csfloat" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is CSFloat free?

Yes, CSFloat is completely free (open-source). You can download, install and use it at no cost.

Which platforms does CSFloat support?

CSFloat is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created CSFloat?

It is built and maintained by bluesyparty-src (@bluesyparty-src); the current version is v1.0.0.

💬 Comments