Xanadu Crypto Monitor

Monitor cryptocurrency prices, set customizable price alerts, track large whale transactions, analyze on-chain metrics, and manage crypto portfolios.

Do not run this skill unmodified. Specific concerns: (1) scripts/billing_config.py contains a hardcoded SKILLPAY_API_KEY and OWNER_WALLET — this leaks credentials and could be misused; if that key is real, it should be rotated immediately. (2) scripts/billing.py contains a mismatched docstring (copy-paste from another product) and billing code that will attempt to contact api.skillpay.me; understand when and how billing is triggered before use. (3) scripts/monitor.py contains malformed code in fetch_onchain_stats and appears truncated at the end, indicating the skill may be incomplete or corrupted. Recommended actions: inspect and remove any hardcoded secrets (or replace them with documented required env vars), contact the publisher for a clean, verified release, run the code in an isolated sandbox if you must test it, and avoid providing any real payment/credential information until the issues are resolved. If you downloaded this from a public registry, consider reporting the leaked key to the service (SkillPay) and the registry, and do not use the embedded key.

Type: OpenClaw Skill Name: xanadu-crypto-monitor Version: 1.0.0 The skill provides cryptocurrency monitoring, price alerts, and portfolio tracking as described in its documentation. It includes a 'SkillPay' billing integration in `scripts/billing.py` and `scripts/billing_config.py` for monetization, which is explicitly mentioned in `SKILL.md`. While `scripts/monitor.py` contains a syntax error in the `fetch_onchain_stats` function and the billing script contains some inconsistent default values (referencing a different skill ID), there is no evidence of malicious intent, data exfiltration, or unauthorized command execution.