← Back to Skills Marketplace
70
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install crypto-first-steps-coach
Description
A calm beginner guide that helps a first-time user understand what crypto is, what to learn first, and what not to rush into. Use when the user is new to cry...
README (SKILL.md)
crypto-first-steps-coach
A calm, safety-first onboarding guide for people new to cryptocurrency.
Workflow
- Ask about experience level, curiosity level, time horizon, and why the user is interested.
- Classify the user into a starting profile: curious observer, learning beginner, or ready-for-tiny-experiment.
- Explain 3–5 foundational concepts in the right order.
- Offer a staged path: learn → observe → secure basics → optional tiny action → reflect.
- Include a do-not-do-yet list to avoid common early mistakes.
Output Format
- User starting profile
- Top concepts to learn next
- Safe first-week or first-month path
- Do-not-do-yet list
- One reflection question
Quality Bar
- Works for a total beginner with minimal prior knowledge.
- Avoids jargon, or explains jargon immediately.
- Gives sequence and emotional calm, not just information.
- Includes safety warnings without sounding alarmist.
Edge Cases
- If the user wants fast recovery from losses or urgent money, explicitly slow them down.
- If the user asks for exact coin picks or leverage plays, redirect to education and risk awareness.
Compatibility
- Prompt-only, no real-time data required.
- Works best when the user shares their goal, budget comfort, and timeline.
Usage Guidance
This skill is likely well-intentioned (a beginner crypto guide) but contains a code file that reads a hard-coded path in /Users/jianghaidong/.openclaw/skills/{skill_name}/SKILL.md, which contradicts the 'prompt-only' claim. Before installing or enabling autonomous invocation: (1) ask the author why the absolute, user-specific path is used and request removal or replacement with a relative/resource-based load; (2) inspect or remove handler.py if you only want the written SKILL.md behavior; (3) run the skill in a sandboxed environment to confirm it doesn't read unexpected files; and (4) decline to provide any credentials or sensitive files. If the author can't justify the file access, treat the code as suspicious and avoid enabling the skill.
Capability Analysis
Type: OpenClaw Skill
Name: crypto-first-steps-coach
Version: 1.0.0
The skill bundle contains a hardcoded absolute path to a specific local user directory ('/Users/jianghaidong/') in handler.py, which is highly irregular for a portable agent skill. This creates a path traversal vulnerability where the 'skill_name' parameter could be manipulated to attempt to read arbitrary files on the host system, although the current implementation does not exfiltrate the data. While the SKILL.md content is benign and safety-oriented, the presence of specific local environment paths and lack of input validation is a significant security concern.
Capability Tags
Capability Assessment
Purpose & Capability
SKILL.md describes a prompt-only, no-real-time-data guide that requires no binaries, env vars, or file access. The included handler.py, however, attempts to read a SKILL.md from a hard-coded path (/Users/jianghaidong/.openclaw/skills/{skill_name}). That file system access is unrelated to the declared purpose and looks like either a developer leftover or a potential privacy mismatch.
Instruction Scope
The runtime instructions (SKILL.md) make no mention of reading local files or user home directories. The handler's call to open a file in a specific user's home violates the stated 'no real-time data required' constraint and expands scope unexpectedly.
Install Mechanism
No install spec, no downloads, and no external packages are declared. The risk from installation is low because nothing is fetched or written to disk during install.
Credentials
The skill declares no required environment variables or credentials and the code does not reference env vars or secret names. There is no apparent request for excessive credentials.
Persistence & Privilege
always:false and normal invocation settings — the skill does not request persistent platform-wide privileges. However, the handler's hard-coded filesystem read probes a specific user path which may access local files if the runtime environment shares that path; this is a scoped but unexpected file access.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install crypto-first-steps-coach - After installation, invoke the skill by name or use
/crypto-first-steps-coach - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release — calm, staged onboarding guide for cryptocurrency beginners.
- Step-by-step workflow to assess user profile and provide tailored concepts in order.
- Offers a safe path: learn, observe, secure basics, (optional) tiny action, reflect.
- Includes a clear “do-not-do-yet” list highlighting common early mistakes to avoid.
- Output is structured: user profile, concepts to learn, safe starting path, warning list, and a reflection question.
- Prioritizes plain language, emotional calm, and actionable safety advice for true beginners.
Metadata
Frequently Asked Questions
What is Crypto First Steps Coach?
A calm beginner guide that helps a first-time user understand what crypto is, what to learn first, and what not to rush into. Use when the user is new to cry... It is an AI Agent Skill for Claude Code / OpenClaw, with 70 downloads so far.
How do I install Crypto First Steps Coach?
Run "/install crypto-first-steps-coach" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Crypto First Steps Coach free?
Yes, Crypto First Steps Coach is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Crypto First Steps Coach support?
Crypto First Steps Coach is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Crypto First Steps Coach?
It is built and maintained by haidong (@harrylabsj); the current version is v1.0.0.
More Skills