OlaXBT Nexus Data

Access OlaXBT Nexus cryptocurrency data APIs — market data, news, KOL tracking, technical indicators, and trading insights. Uses a wallet-linked JWT; no priv...

This package appears to implement a JWT-based client for OlaXBT Nexus and only needs your NEXUS_JWT and network access to api.olaxbt.xyz / api-data.olaxbt.xyz. Before installing: 1) Verify the publisher and repository URL (owner ID and homepage are sparse in the registry metadata). 2) Inspect core/auth.py to ensure the client does not accept, store, or require private keys or other secrets beyond the JWT. 3) Confirm that the package on PyPI or GitHub matches the bundle provided here (to avoid supply-chain mismatch). 4) Note the dependencies (web3, cryptography) — these can handle private keys; run the package in a low-privilege environment and avoid supplying private keys to it. 5) If you obtain the JWT via signing, follow the auth flow outside the skill and only set the JWT env var. If you want higher assurance, run the unit tests locally (pytest) and audit network calls (e.g., with a proxy) to confirm the client only communicates with the documented endpoints.

Type: OpenClaw Skill Name: olaxbt-nexus-data Version: 1.0.2 The bundle is a well-structured Python client for the OlaXBT Nexus cryptocurrency data API, providing access to market data, news, and KOL tracking. It implements robust security practices, including input validation, rate limiting, and error message sanitization (specifically redacting private keys and JWTs from logs in src/olaxbt_nexus_data/core/security.py). While the core library includes a wallet-signing class (NexusAuth), the skill instructions in SKILL.md and the primary NexusClient implementation are designed for a JWT-only flow to minimize sensitive data handling. No indicators of malicious intent, data exfiltration, or harmful prompt injection were detected.