Market Snapshot

Fetch stable JSON market data including price, liquidity, and volume for one or more tokens using Jupiter-backed sources.

This skill contacts a third-party endpoint (app.vecstack.com) with whatever token identifiers the user provides and returns that service's snapshot as JSON. It asks for no credentials and does not access local files, but you should: (1) avoid sending any sensitive strings (private keys, wallet seeds) as query input, (2) review vecstack's privacy/terms if you care about logging, and (3) be aware that cached URLs may be reused unless you append a cache-buster for fresh data. Overall the skill appears coherent for its purpose.

Type: OpenClaw Skill Name: market-snapshot Version: 1.0.0 The skill bundle is benign. It clearly defines its purpose as fetching market snapshots from a specific external API endpoint (`https://app.vecstack.com/api/skills/market-snapshot`). The `SKILL.md` instructions are transparent, explicitly state what the skill will and will not do (e.g., no wallet management, no private keys), and guide the agent to use the `web_fetch` tool for a single, well-defined HTTP GET request. There is no evidence of prompt injection attempts, data exfiltration, unauthorized command execution, or other malicious behaviors.