← 返回 Skills 市场

Crypto Alert Aggregator

Name: Crypto Alert Aggregator
Author: jackfeng0614-prog

作者 jackfeng0614-prog · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

总下载

当前安装

版本数

在 OpenClaw 中安装

/install crypto-alert-aggregator

功能描述

Aggregates real-time crypto market data and Twitter signals into actionable alerts for traders and researchers. Use when you need to monitor price movements,...

使用说明 (SKILL.md)

Crypto Alert Aggregator

Combines market data feeds with Twitter/social signals to detect trading opportunities and market sentiment shifts.

Features

Real-time price and volume monitoring
Twitter sentiment tracking
Alert filtering and prioritization
Multi-asset support

Usage

const aggregator = require('./crypto-alert-aggregator');

// Fetch alerts for specific assets
const alerts = await aggregator.getAlerts({
  assets: ['BTC', 'ETH'],
  minVolumeDelta: 0.2,
  twitterSentimentThreshold: 0.7
});

// Stream live alerts
aggregator.streamAlerts((alert) => {
  console.log(`[${alert.type}] ${alert.asset}: ${alert.message}`);
});

Configuration

Set environment variables:

CRYPTO_API_KEY: Market data API key
TWITTER_API_KEY: Twitter API credentials
ALERT_WEBHOOK: Optional webhook for external notifications

Output Format

{
  "timestamp": "2026-04-13T02:14:08Z",
  "asset": "BTC",
  "type": "volume_spike|price_move|sentiment_shift",
  "value": 45000,
  "change": 2.5,
  "twitterMentions": 1250,
  "sentiment": 0.82,
  "confidence": 0.85
}

安全使用建议

This package appears to be a stubbed crypto/Twitter aggregator: its docs ask for API keys and a webhook, but the shipped code only returns mocked data and does not call any external APIs or use the webhook. Also, the registry metadata and _meta.json owner IDs do not match, and required env vars are not declared in the registry. Before installing or providing any API keys: 1) verify the author's identity and a trusted source/URL for the package; 2) ask the author or maintainer for a version that implements real API calls (and for a clear explanation of when and where data would be sent); 3) check that any webhook forwarding is explicit and auditable; 4) avoid supplying production API keys until the code has been audited and a clear privacy/usage policy is provided. If you expected a working integration, treat this as untrusted/unfinished code rather than a ready-to-run skill.

功能分析

Type: OpenClaw Skill Name: crypto-alert-aggregator Version: 1.0.0 The skill bundle is a functional template for a cryptocurrency market and social sentiment aggregator. The code in index.js uses mock data generators and standard environment variable handling for configuration, with no evidence of malicious execution, data exfiltration, or prompt injection across SKILL.md or the source files.

能力标签

cryptorequires-sensitive-credentials

能力评估

ℹ Purpose & Capability

Name/description (crypto + Twitter signals) align with the code's intent. The SKILL.md asks for CRYPTO_API_KEY, TWITTER_API_KEY, and ALERT_WEBHOOK which are reasonable for this purpose. However, the registry metadata claims no required environment variables or primary credential, and the included code never actually makes real API calls (it always returns mocked data). This mismatch between declared requirements and the runtime behavior is unexpected.

⚠ Instruction Scope

SKILL.md instructs consumers to set API keys and an optional webhook. The index.js reads those environment variables into config, but its network-call functions contain 'Placeholder for actual API call' comments and always return mock data regardless of whether keys are present. The ALERT_WEBHOOK is present in config but never used. This is misleading: the instructions promise external integration and alert forwarding, but the implementation currently does not perform either.

✓ Install Mechanism

There is no install spec (instruction-only style plus a small JS file). Nothing is downloaded or written to disk by an install step. This is low risk from an installer perspective.

⚠ Credentials

SKILL.md requests API keys and a webhook (sensible for the stated function), but the skill registry metadata does not declare any required env vars or a primary credential. The code reads the env vars but does not act on them (mocking instead). Because the manifest doesn't declare these required secrets and the code doesn't use them, there's ambiguity about whether you'll need to supply credentials and whether those keys would ever be transmitted. The presence of an ALERT_WEBHOOK setting is worth noting because if implemented later it could send data externally.

✓ Persistence & Privilege

The skill is not always-enabled and does not request elevated privileges. It starts a setInterval-based poller when streamAlerts is used, which is expected for a streaming alerts module. It does not modify other skills or system-wide settings.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install crypto-alert-aggregator
安装完成后，直接呼叫该 Skill 的名称或使用 /crypto-alert-aggregator 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

- Initial release of Crypto Alert Aggregator. - Aggregates real-time crypto market data with Twitter sentiment signals. - Supports real-time price and volume monitoring across multiple assets. - Filters and prioritizes alerts based on volume, price, and sentiment thresholds. - Allows output via webhooks for external notifications.

元数据

Slug crypto-alert-aggregator

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题