← 返回 Skills 市场

CoinGecko

Name: CoinGecko
Author: olisim02

作者 olisim02 · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

1444

总下载

当前安装

版本数

在 OpenClaw 中安装

/install coingecko

功能描述

Fetch real-time crypto prices, market caps, 24h changes, trending coins, and token details from CoinGecko's free API for thousands of cryptocurrencies.

使用说明 (SKILL.md)

CoinGecko Crypto Price Skill

Fetches crypto market data from the CoinGecko free API (no key required, ~30 req/min rate limit).

Commands

Price check (one or more coins)

python3 scripts/price.py bitcoin ethereum solana

Returns: price, 24h change, market cap, volume for each coin.

Search for a coin by name/ticker

python3 scripts/search.py "pepe"

Returns: matching coin IDs, symbols, and market cap ranks.

Token lookup by contract address (Solana, Ethereum, etc.)

python3 scripts/token.py solana \x3Ccontract_address>

Returns: token name, price, 24h change, market cap, liquidity info.

Trending coins

python3 scripts/trending.py

Returns: top trending coins on CoinGecko.

Coin IDs

CoinGecko uses slug IDs (e.g., bitcoin, ethereum, solana, dogecoin). Use search.py to find the correct ID if unsure.

Rate Limits

Free API: ~30 calls/min. Cache results when doing bulk lookups. Avoid calling in tight loops.

安全使用建议

This skill is coherent and implements a straightforward CoinGecko client. Before installing, note that it will make outbound HTTPS requests to api.coingecko.com (CoinGecko's free API) and is subject to their rate limits (~30 req/min). The source is 'unknown'—if you require a vetted origin, verify the publisher or inspect/track future updates; otherwise the code shown appears benign and limited in scope.

功能分析

Type: OpenClaw Skill Name: coingecko Version: 1.0.0 The skill is classified as suspicious due to a lack of proper input sanitization in `scripts/token.py` and `scripts/price.py`. In `scripts/token.py`, user-provided arguments for `platform` and `address` are directly inserted into the URL path without URL encoding, creating a path injection vulnerability against the CoinGecko API. Similarly, `scripts/price.py` directly concatenates user-provided coin IDs into the URL query string without individual encoding, which could lead to unexpected API behavior with malformed inputs. While there is no evidence of intentional malicious behavior like data exfiltration or backdoors, these input handling flaws represent significant vulnerabilities.

能力评估

✓ Purpose & Capability

Name/description claim realtime crypto data from CoinGecko and the included Python scripts implement exactly that (price, search, token-by-contract, trending). No unrelated env vars, binaries, or APIs are required.

✓ Instruction Scope

SKILL.md instructs running the provided scripts. The scripts only perform HTTPS requests to api.coingecko.com, parse responses, and print JSON. They do not read local files, access environment variables, or transmit data to other endpoints.

✓ Install Mechanism

No install spec (instruction-only skill with code files). There is no downloading of external archives or package installation; the scripts run with the system Python and make outbound HTTPS requests.

✓ Credentials

The skill declares no required credentials or config paths and the code does not attempt to read environment variables or other secret-bearing locations. Network access to CoinGecko is the only runtime requirement.

✓ Persistence & Privilege

always:false and no attempt to modify other skills or system configs. Agent autonomous invocation is allowed (platform default) but the skill does not request elevated or persistent privileges.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install coingecko
安装完成后，直接呼叫该 Skill 的名称或使用 /coingecko 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release: price, search, token lookup, trending. Pure stdlib Python, no API key needed.

元数据

Slug coingecko

版本 1.0.0

许可证 —

累计安装 8

当前安装数 8

历史版本数 1

常见问题

CoinGecko 是什么？

Fetch real-time crypto prices, market caps, 24h changes, trending coins, and token details from CoinGecko's free API for thousands of cryptocurrencies. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1444 次。

如何安装 CoinGecko？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install coingecko」即可一键安装，无需额外配置。

CoinGecko 是免费的吗？

是的，CoinGecko 完全免费（开源免费），可自由下载、安装和使用。

CoinGecko 支持哪些平台？

CoinGecko 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 CoinGecko？

由 olisim02（@olisim02）开发并维护，当前版本 v1.0.0。