← Back to Skills Marketplace
redf426

Crypto Chart

by redf426 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
73
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install crypto-chart
Description
Get cryptocurrency token price and generate candlestick charts via CoinGecko API or Hyperliquid API. Use when user asks for token price, crypto price, price...
README (SKILL.md)

Crypto Price & Chart

Get cryptocurrency token price and generate candlestick charts.

Usage

Execute the script with token symbol and optional duration:

python3 {baseDir}/scripts/get_price_chart.py \x3CSYMBOL> [duration]

Examples:

  • python3 {baseDir}/scripts/get_price_chart.py HYPE
  • python3 {baseDir}/scripts/get_price_chart.py HYPE 12h
  • python3 {baseDir}/scripts/get_price_chart.py BTC 3h
  • python3 {baseDir}/scripts/get_price_chart.py ETH 30m
  • python3 {baseDir}/scripts/get_price_chart.py SOL 2d

Duration format: 30m, 3h, 12h, 24h (default), 2d

Output

Returns JSON with:

  • price - Current price in USD/USDT
  • change_period_percent - Price change percentage for the period
  • chart_path - Path to generated PNG chart (if available)
  • text_plain - Formatted text description

Chart as image (always when chart_path is present): In OpenClaw, send the image via message tool (not plain text placeholder):

  1. Copy from /tmp to workspace: cp \x3Cchart_path> ./crypto_chart_\x3CSYMBOL>_\x3Cduration>.png
  2. Send: message(action="send", filePath="./crypto_chart_\x3CSYMBOL>_\x3Cduration>.png", message="\x3Ctext_plain>")
  3. MANDATORY cleanup — run both commands regardless of send result:
    • rm ./crypto_chart_\x3CSYMBOL>_\x3Cduration>.png
    • rm \x3Cchart_path>
  4. Reply NO_REPLY.

Do not skip step 3. Files left in workspace accumulate and waste disk space.

Chart Details

  • Format: Candlestick chart (8x8 square)
  • Theme: Dark (#0f141c background)
  • Output: /tmp/crypto_chart_{SYMBOL}_{timestamp}.png

Data Sources

  1. Hyperliquid API - For HYPE and other Hyperliquid tokens (preferred)
  2. CoinGecko API - Fallback for other tokens

Price data cached for 300 seconds (5 minutes) in /tmp/crypto_price_*.json.

Usage Guidance
This skill appears coherent and implements what it says: it needs python3 and matplotlib, and it fetches data from CoinGecko and Hyperliquid and writes caches/charts to /tmp. Before installing: ensure you are comfortable allowing outbound network calls to those APIs; confirm you will install matplotlib from a trusted source (pip); be aware that files are created in /tmp which on multi-user hosts can be readable by others; the SKILL.md mandates cleanup but verify the agent reliably removes temp files (leftover files could accumulate). The script shows some duplicated function definitions (likely sloppy copy/paste) — not necessarily malicious but may indicate rough maintenance. No credentials are requested and no obvious exfiltration endpoints are present.
Capability Analysis
Type: OpenClaw Skill Name: crypto-chart Version: 1.0.0 The script 'get_price_chart.py' contains a path traversal vulnerability because it uses the unsanitized 'SYMBOL' argument to construct file paths for saving and deleting PNG charts (e.g., in '/tmp/crypto_chart_{symbol}_{ts}.png'). When combined with the instructions in 'SKILL.md' that direct the AI agent to copy and then delete these files, this could allow an attacker to overwrite or delete arbitrary files on the system. Additionally, the script contains significant code duplication and redundant function definitions, which may indicate poor quality control or a messy assembly of components.
Capability Tags
crypto
Capability Assessment
Purpose & Capability
Name/description match the actual behavior: the script fetches price/ohlc data from CoinGecko and Hyperliquid, caches results, and renders PNG candlestick charts. Required binary (python3) and Python dependency (matplotlib) are appropriate and proportionate.
Instruction Scope
SKILL.md instructs only how to run the included script, copy the generated PNG into the workspace, send it via the message tool, and clean up. The instructions do not direct reading unrelated files, require extra credentials, or send data to unexpected endpoints. Note: outputs and caches are written to /tmp as documented.
Install Mechanism
No install spec (instruction-only) and a small requirements.txt (matplotlib) — low-risk. The code is bundled with the skill rather than downloaded at runtime; nothing is fetched from untrusted installers during install.
Credentials
The skill requests no environment variables, no credentials, and no config paths beyond /tmp for cache and chart files. Network access to api.coingecko.com and api.hyperliquid.xyz is required and consistent with the described data sources.
Persistence & Privilege
always:false and no self-modifying or cross-skill configuration. The skill does not request permanent elevated presence or access to other skills' configuration.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install crypto-chart
  3. After installation, invoke the skill by name or use /crypto-chart
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial public release
Metadata
Slug crypto-chart
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Crypto Chart?

Get cryptocurrency token price and generate candlestick charts via CoinGecko API or Hyperliquid API. Use when user asks for token price, crypto price, price... It is an AI Agent Skill for Claude Code / OpenClaw, with 73 downloads so far.

How do I install Crypto Chart?

Run "/install crypto-chart" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Crypto Chart free?

Yes, Crypto Chart is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Crypto Chart support?

Crypto Chart is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Crypto Chart?

It is built and maintained by redf426 (@redf426); the current version is v1.0.0.

💬 Comments