Unified crypto market data API and scripts for exchanges, markets, tickers, OHLCV, and orderbooks

Unified crypto market data API and scripts for exchanges, markets, tickers, OHLCV, and orderbooks.

This package appears to be a straightforward Milaex market-data client. Before installing: (1) Verify you trust the source/homepage (https://api.milaex.com) and that you intended to use Milaex; (2) Only supply a real MILAEX_API_KEY if you trust the code and host — the key will be sent in the x-api-key header to the configured base URL; (3) Be aware of two persistence items: the SKILL.md suggests storing the key in ~/.clawdbot/openclaw.json (this will persist the secret in your agent config), and the client honors an optional MILAEX_BASE_URL env var — do not set this to an untrusted host (it would cause your API key to be sent there); (4) The only runtime dependency is the 'requests' Python package (pip install --user requests); (5) If you want extra caution, inspect the included scripts (they are small and readable) or run the provided test_unauthorized.py with a dummy key to verify behavior before supplying your real key.

Type: OpenClaw Skill Name: milaex-crypto-api Version: 1.0.2 The skill bundle is a legitimate client for the Milaex crypto market data API. All scripts interact with the `https://api.milaex.com` endpoint, which is explicitly stated and defaulted in `scripts/milaex_client.py`. The `SKILL.md` documentation is clear, provides accurate instructions, and contains no evidence of prompt injection attempts against the AI agent. While the `MILAEX_BASE_URL` environment variable allows configuring the API endpoint, it defaults to the legitimate Milaex API, and there are no instructions or indications within the bundle to set it to a malicious or unauthorized domain. The code uses standard Python libraries (`requests`) and practices, and there is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation.