← Back to Skills Marketplace
296
Downloads
0
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install totoxu-crypto-analyzer
Description
Fetch real-time crypto prices and calculate technical indicators (SMA, EMA, MACD, RSI, Bollinger Bands, ATR) for BTC, ETH, SOL, BNB, XRP, DOGE. Powered by mu...
Usage Guidance
This skill appears to implement the advertised crypto data and indicator functions, but exercise caution before installing or wiring real billing keys. Key points to consider:
- Hard-coded credential: billing.py includes a default API key and SKILL_ID in source. Treat this as a potential secret leak or placeholder; do not assume it is safe to use. Prefer providing your own SKILL_BILLING_API_KEY and rotate any exposed keys.
- Billing inconsistency: the documentation claims 0.001 USDT per call, but the charge function sends amount: 0. Ask the publisher which behavior is intended — you should not rely on embedded defaults for real billing.
- Test-mode: use the provided --test-mode flag to exercise the scripts before adding real billing credentials or enabling the skill for real users.
- Network access: the scripts make outbound requests to several public crypto APIs (Binance, CoinGecko, CoinCap, CryptoCompare) and to https://skillpay.me for billing. If you require strict network policies, review these endpoints.
- Verification: because the source owner is 'unknown' and the package includes a hard-coded key, prefer installing only after verifying the publisher (homepage, repo, signatures) or reviewing the code locally and removing any embedded secrets.
If you want, I can: (1) flag the exact lines with the hard-coded key and SKILL_ID for removal; (2) produce a suggested patch to remove defaults and make billing explicit; or (3) run a deeper code-consistency checklist to identify other subtle mismatches.
Capability Analysis
Type: OpenClaw Skill
Name: totoxu-crypto-analyzer
Version: 1.3.0
The skill bundle provides legitimate cryptocurrency market data and technical analysis tools, communicating with reputable public APIs (Binance, CoinGecko, CoinCap) and a dedicated billing service (skillpay.me). While scripts/billing.py contains a hardcoded API key, which is a security vulnerability (credential exposure), the code logic is transparent and aligns strictly with the stated purpose. There is no evidence of data exfiltration, malicious command execution, or prompt injection intended to hijack the AI agent.
Capability Assessment
Purpose & Capability
Name/description (market data + indicators) align with the included scripts: fetch_market.py and calc_indicators.py implement the advertised features. The requirement for billing-related env vars (SKILL_BILLING_API_KEY, SKILL_ID) is consistent with the SKILL.md's pay-per-use claim.
Instruction Scope
SKILL.md and the scripts instruct running the Python scripts and passing --user for billing. However, the billing behavior in the code contradicts the docs (see billing amount), and billing.py contains an embedded default API key and default SKILL_ID. Instructions ask to pass user IDs and may surface payment_url links — otherwise the runtime actions are limited to public API requests, which is appropriate for the stated purpose.
Install Mechanism
No install spec (instruction-only install) and no downloads; scripts are plain Python and call only public web APIs. This is low risk from an install mechanism perspective.
Credentials
Declared env vars (SKILL_BILLING_API_KEY, SKILL_ID) are proportionate to a pay-per-use skill, but billing.py embeds a default API key and a default SKILL_ID value. Hard-coded credentials in the repository are a security concern and inconsistent with expecting callers to provide their own keys.
Persistence & Privilege
Skill is not forced-always and does not request system-level persistence. It does not modify other skills or system settings based on the provided files.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install totoxu-crypto-analyzer - After installation, invoke the skill by name or use
/totoxu-crypto-analyzer - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.3.0
Billing keys hardcoded as defaults for universal charging.
v1.2.0
Billing rewritten to official SkillPay SDK. Env vars: SKILL_BILLING_API_KEY, SKILL_ID.
v1.1.0
Security fix: SKILLPAY_API_KEY moved to environment variable.
v1.0.0
- Initial release of Crypto Market Analyzer: fetch real-time crypto prices and calculate popular technical indicators (SMA, EMA, MACD, RSI, Bollinger Bands, ATR).
- Supports major coins: BTC, ETH, SOL, BNB, XRP, DOGE; sources data from Binance, CoinGecko, CoinCap, and CryptoCompare.
- Provides two main commands: fetch market data (including real-time and historical OHLCV) and technical indicator analysis with trading signals.
- Paid skill: each use charges 0.001 USDT via SkillPay; handles low balance with a payment URL prompt.
- Clear error handling for payment, data source, and unsupported coins.
- Includes beginner-friendly output summaries and important disclaimers about financial advice.
Metadata
Frequently Asked Questions
What is Crypto Market Analyzer?
Fetch real-time crypto prices and calculate technical indicators (SMA, EMA, MACD, RSI, Bollinger Bands, ATR) for BTC, ETH, SOL, BNB, XRP, DOGE. Powered by mu... It is an AI Agent Skill for Claude Code / OpenClaw, with 296 downloads so far.
How do I install Crypto Market Analyzer?
Run "/install totoxu-crypto-analyzer" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Crypto Market Analyzer free?
Yes, Crypto Market Analyzer is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Crypto Market Analyzer support?
Crypto Market Analyzer is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Crypto Market Analyzer?
It is built and maintained by totoxu (@totoxu); the current version is v1.3.0.
More Skills