← Back to Skills Marketplace
128
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install openclaw-coinbase
Description
Access Coinbase API to fetch balances, get EUR trading pairs, create market or limit crypto orders, and view order history and fills.
Usage Guidance
What to check before installing: 1) Confirm the skill source and author — registry owner ID (kn7df...) does not match the _meta.json ownerId (@mtrab), which may indicate a copy/paste or provenance issue. 2) The registry metadata declares no credentials but the code requires an API key and a PEM private key file; ensure you provide keys only if you trust the author. 3) Prefer storing private keys in a secure location (environment variables or a secrets manager) rather than a plaintext file next to the script; if you must use files, restrict file permissions and don't commit them to version control. 4) Review the script for any unexpected network endpoints (it contacts https://api.coinbase.com paths, which is expected) and validate that these endpoints match your intended Coinbase environment. 5) Consider running the code in a restricted environment (dedicated VM/container, with least privileges) and test read-only operations (e.g., fetching balances/products) before allowing order creation. 6) If you need higher assurance, request provenance (author identity, signed release) or prefer an officially published Coinbase integration.
Capability Analysis
Type: OpenClaw Skill
Name: openclaw-coinbase
Version: 1.0.0
The skill provides a legitimate integration with the Coinbase Developer Platform (CDP) API for trading and account management. The implementation in `scripts/coinbase.py` uses standard JWT authentication and follows Coinbase's official documentation for API interactions, with no evidence of data exfiltration, malicious execution, or prompt injection.
Capability Tags
Capability Assessment
Purpose & Capability
The Python module implements Coinbase CDP API calls (balances, products, orders, fills) consistent with the skill description. However the registry metadata declares no required credentials or env vars, while the SKILL.md/README and the code require an API key and a PEM private key file — a mismatch between declared requirements and actual runtime needs.
Instruction Scope
Runtime instructions are narrowly scoped to Coinbase API usage (install cryptography/PyJWT, create .coinbase-api-key and .coinbase-api-secret files, call the provided functions). The instructions do not ask the agent to read unrelated system files or transmit data to non-Coinbase endpoints. Caveat: they require placing a private key file alongside the script, which raises local secrets-management concerns.
Install Mechanism
This is an instruction-only skill with no install spec and no external binary downloads; risk from installation mechanism is low. Dependencies are standard Python packages (cryptography, PyJWT) noted in README.
Credentials
The skill needs two sensitive secrets (API key and private key PEM) but declares no required env vars or primary credential in the registry. The code reads credential files from the script directory (.coinbase-api-key and .coinbase-api-secret), which is reasonably minimal for the stated purpose but the absence of declared credentials in metadata is an incoherence that should be resolved. Storing an unencrypted private key in the repo directory is a potential security risk.
Persistence & Privilege
The skill does not request always: true, does not modify other skills, and is user-invocable only. It does not request elevated persistent presence or system-wide changes.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-coinbase - After installation, invoke the skill by name or use
/openclaw-coinbase - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Coinbase Skill 1.0.0
- New version converts the skill from a governance/risk analysis assistant to a developer-focused, trading API integration.
- Adds Python API functions for account balances, product info, order creation, and order history using the Coinbase API.
- Requires API key/private key setup and cryptography library for authenticated requests.
- All trading operations focus on EUR pairs (e.g., BTC-EUR).
- Previous institutional governance, recordkeeping, and risk-isolation documentation has been removed.
Metadata
Frequently Asked Questions
What is Coinbase?
Access Coinbase API to fetch balances, get EUR trading pairs, create market or limit crypto orders, and view order history and fills. It is an AI Agent Skill for Claude Code / OpenClaw, with 128 downloads so far.
How do I install Coinbase?
Run "/install openclaw-coinbase" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Coinbase free?
Yes, Coinbase is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Coinbase support?
Coinbase is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Coinbase?
It is built and maintained by MTrab (@mtrab); the current version is v1.0.0.
More Skills