← Back to Skills Marketplace
olisim02

CoinGecko

by olisim02 · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
1444
Downloads
1
Stars
8
Active Installs
1
Versions
Install in OpenClaw
/install coingecko
Description
Fetch real-time crypto prices, market caps, 24h changes, trending coins, and token details from CoinGecko's free API for thousands of cryptocurrencies.
README (SKILL.md)

CoinGecko Crypto Price Skill

Fetches crypto market data from the CoinGecko free API (no key required, ~30 req/min rate limit).

Commands

Price check (one or more coins)

python3 scripts/price.py bitcoin ethereum solana

Returns: price, 24h change, market cap, volume for each coin.

Search for a coin by name/ticker

python3 scripts/search.py "pepe"

Returns: matching coin IDs, symbols, and market cap ranks.

Token lookup by contract address (Solana, Ethereum, etc.)

python3 scripts/token.py solana \x3Ccontract_address>

Returns: token name, price, 24h change, market cap, liquidity info.

Trending coins

python3 scripts/trending.py

Returns: top trending coins on CoinGecko.

Coin IDs

CoinGecko uses slug IDs (e.g., bitcoin, ethereum, solana, dogecoin). Use search.py to find the correct ID if unsure.

Rate Limits

Free API: ~30 calls/min. Cache results when doing bulk lookups. Avoid calling in tight loops.

Usage Guidance
This skill is coherent and implements a straightforward CoinGecko client. Before installing, note that it will make outbound HTTPS requests to api.coingecko.com (CoinGecko's free API) and is subject to their rate limits (~30 req/min). The source is 'unknown'—if you require a vetted origin, verify the publisher or inspect/track future updates; otherwise the code shown appears benign and limited in scope.
Capability Analysis
Type: OpenClaw Skill Name: coingecko Version: 1.0.0 The skill is classified as suspicious due to a lack of proper input sanitization in `scripts/token.py` and `scripts/price.py`. In `scripts/token.py`, user-provided arguments for `platform` and `address` are directly inserted into the URL path without URL encoding, creating a path injection vulnerability against the CoinGecko API. Similarly, `scripts/price.py` directly concatenates user-provided coin IDs into the URL query string without individual encoding, which could lead to unexpected API behavior with malformed inputs. While there is no evidence of intentional malicious behavior like data exfiltration or backdoors, these input handling flaws represent significant vulnerabilities.
Capability Assessment
Purpose & Capability
Name/description claim realtime crypto data from CoinGecko and the included Python scripts implement exactly that (price, search, token-by-contract, trending). No unrelated env vars, binaries, or APIs are required.
Instruction Scope
SKILL.md instructs running the provided scripts. The scripts only perform HTTPS requests to api.coingecko.com, parse responses, and print JSON. They do not read local files, access environment variables, or transmit data to other endpoints.
Install Mechanism
No install spec (instruction-only skill with code files). There is no downloading of external archives or package installation; the scripts run with the system Python and make outbound HTTPS requests.
Credentials
The skill declares no required credentials or config paths and the code does not attempt to read environment variables or other secret-bearing locations. Network access to CoinGecko is the only runtime requirement.
Persistence & Privilege
always:false and no attempt to modify other skills or system configs. Agent autonomous invocation is allowed (platform default) but the skill does not request elevated or persistent privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install coingecko
  3. After installation, invoke the skill by name or use /coingecko
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: price, search, token lookup, trending. Pure stdlib Python, no API key needed.
Metadata
Slug coingecko
Version 1.0.0
License
All-time Installs 8
Active Installs 8
Total Versions 1
Frequently Asked Questions

What is CoinGecko?

Fetch real-time crypto prices, market caps, 24h changes, trending coins, and token details from CoinGecko's free API for thousands of cryptocurrencies. It is an AI Agent Skill for Claude Code / OpenClaw, with 1444 downloads so far.

How do I install CoinGecko?

Run "/install coingecko" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is CoinGecko free?

Yes, CoinGecko is completely free (open-source). You can download, install and use it at no cost.

Which platforms does CoinGecko support?

CoinGecko is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created CoinGecko?

It is built and maintained by olisim02 (@olisim02); the current version is v1.0.0.

💬 Comments