← Back to Skills Marketplace
valuescan-monitor-skill
by
ValueScan-ai
· GitHub ↗
· v1.0.3
· MIT-0
89
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install valuescan-monitor-skill
Description
ValueScan后台实时监控Skill。订阅Stream推送（大盘分析/代币信号），将数据持久化写入本地文件。
Usage Guidance
Before installing: 1) Note the registry metadata does not list the API credentials but the SKILL.md and code require them — ask the publisher to clarify. 2) The skill will ask you for your ValueScan API Key and Secret and store them in plaintext at ~/.vs-monitor/config.json; avoid providing other unrelated credentials and consider using a dedicated, restricted account or container. 3) The skill runs persistent background processes and writes/reads PID files and logs; review the included scripts yourself (they are present) and run them in a sandbox (container/VM) if you are unsure. 4) If you accept, verify the stream endpoints (stream.valuescan.ai / api.valuescan.io) are expected, and consider encrypting the config or restricting filesystem permissions on ~/.vs-monitor to reduce exposure.
Capability Analysis
Type: OpenClaw Skill
Name: valuescan-monitor-skill
Version: 1.0.3
The skill is a legitimate monitoring tool for the ValueScan cryptocurrency platform, designed to subscribe to real-time market and token signal streams. The code in `monitor.py` and `monitor.ts` implements standard HMAC-SHA256 authentication and SSE (Server-Sent Events) handling to fetch data and save it to a user-defined local directory. While the `SKILL.md` instructions direct the AI agent to manage background processes using `nohup` and store API credentials in plaintext within `~/.vs-monitor/config.json`, these actions are explicitly disclosed in a security note and are functionally necessary for a persistent monitoring service.
Capability Tags
Capability Assessment
Purpose & Capability
The SKILL.md and included Python/TypeScript code clearly require a ValueScan API Key and Secret and will call stream.valuescan.ai / api.valuescan.io. However the registry metadata lists no required environment variables or primary credential, which is inconsistent with the declared credentials in SKILL.md and the code. Network endpoints used are limited to valuescan domains (no unexpected third‑party endpoints).
Instruction Scope
Instructions stay within the stated monitoring purpose: ask user for API credentials and an output directory, write a local config (~/.vs-monitor/config.json), start/stop background monitor processes, and write event data to local files. This is coherent with the description, but the agent is instructed to collect and persist secrets and to create/kill background processes and PID files — actions with meaningful system impact that should be acknowledged before granting the skill permissions.
Install Mechanism
There is no packaged install step (instruction-only), and included code indicates standard Python/npm deps (requests, sseclient-py, eventsource). No downloads from untrusted URLs or extract-from-remote operations are present. The user will need to run pip/npm to satisfy dependencies, which is normal for these scripts.
Credentials
The skill legitimately needs a ValueScan API Key and Secret to authenticate SSE and API calls. However the registry metadata did not advertise required credentials while SKILL.md requires them and instructs storing them in plaintext at ~/.vs-monitor/config.json. Storing secret_key as cleartext and having the agent write it to disk is a sensitivity concern; the omission in registry metadata is an incoherence that reduces transparency.
Persistence & Privilege
The skill creates background monitor processes, writes PID files to ~/.vs-monitor/, and includes instructions to kill existing PIDs. always:false (not force-enabled) and autonomous invocation allowed (platform default). While not outright privileged, background processes and PID-based kill logic can affect the host (e.g., PID reuse risks). The skill does not request or modify other skills' configs.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install valuescan-monitor-skill - After installation, invoke the skill by name or use
/valuescan-monitor-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
- 移除对飞书机器人通知的支持，精简功能描述与配置说明
- 更新安装引导，仅保留 API Key、Secret Key 和数据输出目录相关内容
- 文档中明确增加“安全注意事项”一节，强调凭证和进程管理的安全要求
- 其余进程管理、文件写入、触发语指令等核心机制保持不变
v1.0.1
No significant changes detected in this version.
- Version number updated to 1.0.1.
- No file or documentation changes. Functionality remains the same as previous version.
v1.0.0
Initial release of valuescan-monitor-skill.
- Real-time monitoring of ValueScan Stream for market analysis and token signal events.
- Writes received data to local files with structured directories and filenames.
- Optionally sends formatted Feishu (Lark) bot notifications for each event.
- Manages monitoring processes with PID files for easy start/stop/status operations.
- Guides user setup for API credentials, output directory, and notification settings on first use.
- Supports both Python and TypeScript script execution for monitoring tasks.
Metadata
Frequently Asked Questions
What is valuescan-monitor-skill?
ValueScan后台实时监控Skill。订阅Stream推送（大盘分析/代币信号），将数据持久化写入本地文件。 It is an AI Agent Skill for Claude Code / OpenClaw, with 89 downloads so far.
How do I install valuescan-monitor-skill?
Run "/install valuescan-monitor-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is valuescan-monitor-skill free?
Yes, valuescan-monitor-skill is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does valuescan-monitor-skill support?
valuescan-monitor-skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created valuescan-monitor-skill?
It is built and maintained by ValueScan-ai (@valuescan-io); the current version is v1.0.3.
More Skills