← Back to Skills Marketplace
marsbit-crypto-flash-skill
by
xinyi-drink
· GitHub ↗
· v1.0.9
· MIT-0
246
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install marsbit-crypto-flashskill
Description
Crypto-native Web3 news and flash intelligence from MarsBit through hosted MCP. Use this for L1/L2 ecosystems, DeFi/CeFi, regulation, exchange flows, and mar...
Usage Guidance
Before installing: 1) Verify the upstream repository (https://github.com/domilin/marsbit-crypto-news-skill) and confirm the package.json honestly reflects needed capabilities — ask the author why 'exec' and 'read' are declared. 2) Recognize that queries and any user-provided context will be sent to https://www.marsbit.co/api/mcp (privacy risk). 3) If you want minimal risk, restrict the skill from being invoked autonomously or run it in a sandboxed account. 4) If you must install, inspect the repository contents locally for unexpected scripts and prefer the ClawHub install path over manual GitHub installs if you trust ClawHub. If the author cannot justify the extra tool permissions, treat the skill as over-privileged and avoid installing it.
Capability Analysis
Type: OpenClaw Skill
Name: marsbit-crypto-flashskill
Version: 1.0.9
The MarsBit Crypto News Skill is a legitimate tool designed to fetch Web3 and cryptocurrency news from a hosted MCP endpoint (https://www.marsbit.co/api/mcp). It uses standard curl commands to interact with the API and provides clear instructions for the agent to parse and format news data. No evidence of data exfiltration, malicious execution, or unauthorized system access was found in SKILL.md or package.json.
Capability Assessment
Purpose & Capability
The SKILL.md and README describe a hosted-MCP news/flash fetcher that only needs outbound HTTP (curl). However package.json declares OpenClaw 'tools' dependencies including 'exec' and 'read' which are not used or documented in the runtime instructions — this grants the skill broader local access than its stated purpose requires.
Instruction Scope
The runtime instructions are narrowly scoped to making POST requests to the hosted MCP endpoint (https://www.marsbit.co/api/mcp) via curl and parsing returned JSON. They do not instruct reading local files, environment variables, or forwarding data to other endpoints.
Install Mechanism
The only install action is a brew formula for curl (a well-known package) and optional instructions to clone from GitHub. No arbitrary downloads or extract-from-unknown-URLs are present.
Credentials
No environment variables or credentials are requested (good). But package.json's declared tool dependencies ('exec', 'read') are disproportionate: 'read' could allow access to local files and 'exec' to run arbitrary commands, neither of which are required by the SKILL.md. This is an unnecessary escalation of access.
Persistence & Privilege
The skill is not always-on and is user-invocable (default). Autonomous invocation is permitted by platform default; combined with the extra 'exec'/'read' tool grants this could increase blast radius. There is no evidence the skill modifies other skills or system-wide settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install marsbit-crypto-flashskill - After installation, invoke the skill by name or use
/marsbit-crypto-flashskill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.9
No changes detected in this release.
- No modifications were made to the code or documentation.
- All features and capabilities remain as in the previous version.
Metadata
Frequently Asked Questions
What is marsbit-crypto-flash-skill?
Crypto-native Web3 news and flash intelligence from MarsBit through hosted MCP. Use this for L1/L2 ecosystems, DeFi/CeFi, regulation, exchange flows, and mar... It is an AI Agent Skill for Claude Code / OpenClaw, with 246 downloads so far.
How do I install marsbit-crypto-flash-skill?
Run "/install marsbit-crypto-flashskill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is marsbit-crypto-flash-skill free?
Yes, marsbit-crypto-flash-skill is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does marsbit-crypto-flash-skill support?
marsbit-crypto-flash-skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (darwin, linux, win32).
Who created marsbit-crypto-flash-skill?
It is built and maintained by xinyi-drink (@domilin); the current version is v1.0.9.
More Skills