← Back to Skills Marketplace
16842
Downloads
11
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install crypto-market-data
Description
No API KEY needed for free tier. Professional-grade cryptocurrency and stock market data integration for real-time prices, company profiles, and global analytics. Powered by Node.js with zero external dependencies.
Usage Guidance
Install only if you are comfortable sending market queries to api.igent.net and caching a temporary provider token in the skill's scripts directory. Do not set API_BASE_URL unless you trust the replacement endpoint, keep the skill directory private, and delete scripts/.token if you want to clear the cached session.
Capability Analysis
Type: OpenClaw Skill
Name: crypto-market-data
Version: 1.0.2
The skill bundle is classified as suspicious due to a critical vulnerability in `scripts/api_client.js`. The `BASE_URL` for API calls can be overridden by the `API_BASE_URL` environment variable. If an attacker can control the environment where this skill runs, they could redirect all API traffic, including the session token stored in `.token`, to an arbitrary malicious server, leading to potential data exfiltration and session hijacking. While the default `BASE_URL` points to a legitimate domain (`https://api.igent.net/api`), the flexibility to override it without explicit sanitization or restriction constitutes a significant security risk, even if not intentionally malicious within the skill's design.
Capability Assessment
Purpose & Capability
The scripts retrieve cryptocurrency and stock market data through read-only GET requests, matching the stated purpose; no trading, account mutation, destructive behavior, broad local indexing, or unrelated data access was found.
Instruction Scope
The documentation provides normal usage guidance and describes automatic authentication; it does not contain prompt overrides, hidden role changes, autonomous background behavior, or instructions to access unrelated user data.
Install Mechanism
The package has no dependencies, no install scripts, and no npm lifecycle hooks; it consists of Node.js scripts using standard libraries.
Credentials
Outbound requests to api.igent.net are expected for market data. The API_BASE_URL environment override can redirect traffic if deliberately set, and the client would also accept plain HTTP in that case, so users should avoid untrusted endpoint overrides.
Persistence & Privilege
The client stores a temporary provider token in scripts/.token and the SKILL.md discloses that behavior, but the file is written with default permissions and the documentation does not fully describe cleanup, lifetime, or local-security implications.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install crypto-market-data - After installation, invoke the skill by name or use
/crypto-market-data - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
Major rewrite: Migration from Python to Node.js, and expansion to support stock market data.
- All Python scripts and dependencies removed; replaced by Node.js scripts using only standard libraries.
- Added stock market features: real-time stock quotes, company profiles, and stock ticker search tools.
- Improved and streamlined authentication: session token management now handled via JavaScript and local file storage.
- Updated documentation for new usage patterns, script names, syntax, and supported features.
- No external dependencies required—just Node.js out-of-the-box.
v1.0.1
- fix SSL certificate verification
v1.0.0
- Initial release of Crypto Market Data skill.
- Provides real-time and historical cryptocurrency data with no API key required for free tier.
- Includes scripts for prices, trending coins, top coins, search, detailed coin info, OHLC and historical charts, global stats, and public company treasury data.
- Automatic authentication and rate limiting handled internally.
- Supports agent integration and usage through the provided scripts.
Metadata
Frequently Asked Questions
What is Crypto Market Data Skill (No Key Required)?
No API KEY needed for free tier. Professional-grade cryptocurrency and stock market data integration for real-time prices, company profiles, and global analytics. Powered by Node.js with zero external dependencies. It is an AI Agent Skill for Claude Code / OpenClaw, with 16842 downloads so far.
How do I install Crypto Market Data Skill (No Key Required)?
Run "/install crypto-market-data" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Crypto Market Data Skill (No Key Required) free?
Yes, Crypto Market Data Skill (No Key Required) is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Crypto Market Data Skill (No Key Required) support?
Crypto Market Data Skill (No Key Required) is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Crypto Market Data Skill (No Key Required)?
It is built and maintained by Liam (@liam8); the current version is v1.0.2.
More Skills