← 返回 Skills 市场

Crypto Chart

Name: Crypto Chart
Author: redf426

作者 redf426 · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

总下载

当前安装

版本数

在 OpenClaw 中安装

/install crypto-chart

功能描述

Get cryptocurrency token price and generate candlestick charts via CoinGecko API or Hyperliquid API. Use when user asks for token price, crypto price, price...

使用说明 (SKILL.md)

Crypto Price & Chart

Get cryptocurrency token price and generate candlestick charts.

Usage

Execute the script with token symbol and optional duration:

python3 {baseDir}/scripts/get_price_chart.py \x3CSYMBOL> [duration]

Examples:

python3 {baseDir}/scripts/get_price_chart.py HYPE
python3 {baseDir}/scripts/get_price_chart.py HYPE 12h
python3 {baseDir}/scripts/get_price_chart.py BTC 3h
python3 {baseDir}/scripts/get_price_chart.py ETH 30m
python3 {baseDir}/scripts/get_price_chart.py SOL 2d

Duration format: 30m, 3h, 12h, 24h (default), 2d

Output

Returns JSON with:

price - Current price in USD/USDT
change_period_percent - Price change percentage for the period
chart_path - Path to generated PNG chart (if available)
text_plain - Formatted text description

Chart as image (always when chart_path is present): In OpenClaw, send the image via message tool (not plain text placeholder):

Copy from /tmp to workspace: cp \x3Cchart_path> ./crypto_chart_\x3CSYMBOL>_\x3Cduration>.png
Send: message(action="send", filePath="./crypto_chart_\x3CSYMBOL>_\x3Cduration>.png", message="\x3Ctext_plain>")
MANDATORY cleanup — run both commands regardless of send result:
- rm ./crypto_chart_\x3CSYMBOL>_\x3Cduration>.png
- rm \x3Cchart_path>
Reply NO_REPLY.

Do not skip step 3. Files left in workspace accumulate and waste disk space.

Chart Details

Format: Candlestick chart (8x8 square)
Theme: Dark (#0f141c background)
Output: /tmp/crypto_chart_{SYMBOL}_{timestamp}.png

Data Sources

Hyperliquid API - For HYPE and other Hyperliquid tokens (preferred)
CoinGecko API - Fallback for other tokens

Price data cached for 300 seconds (5 minutes) in /tmp/crypto_price_*.json.

安全使用建议

This skill appears coherent and implements what it says: it needs python3 and matplotlib, and it fetches data from CoinGecko and Hyperliquid and writes caches/charts to /tmp. Before installing: ensure you are comfortable allowing outbound network calls to those APIs; confirm you will install matplotlib from a trusted source (pip); be aware that files are created in /tmp which on multi-user hosts can be readable by others; the SKILL.md mandates cleanup but verify the agent reliably removes temp files (leftover files could accumulate). The script shows some duplicated function definitions (likely sloppy copy/paste) — not necessarily malicious but may indicate rough maintenance. No credentials are requested and no obvious exfiltration endpoints are present.

功能分析

Type: OpenClaw Skill Name: crypto-chart Version: 1.0.0 The script 'get_price_chart.py' contains a path traversal vulnerability because it uses the unsanitized 'SYMBOL' argument to construct file paths for saving and deleting PNG charts (e.g., in '/tmp/crypto_chart_{symbol}_{ts}.png'). When combined with the instructions in 'SKILL.md' that direct the AI agent to copy and then delete these files, this could allow an attacker to overwrite or delete arbitrary files on the system. Additionally, the script contains significant code duplication and redundant function definitions, which may indicate poor quality control or a messy assembly of components.

能力标签

crypto

能力评估

✓ Purpose & Capability

Name/description match the actual behavior: the script fetches price/ohlc data from CoinGecko and Hyperliquid, caches results, and renders PNG candlestick charts. Required binary (python3) and Python dependency (matplotlib) are appropriate and proportionate.

✓ Instruction Scope

SKILL.md instructs only how to run the included script, copy the generated PNG into the workspace, send it via the message tool, and clean up. The instructions do not direct reading unrelated files, require extra credentials, or send data to unexpected endpoints. Note: outputs and caches are written to /tmp as documented.

✓ Install Mechanism

No install spec (instruction-only) and a small requirements.txt (matplotlib) — low-risk. The code is bundled with the skill rather than downloaded at runtime; nothing is fetched from untrusted installers during install.

✓ Credentials

The skill requests no environment variables, no credentials, and no config paths beyond /tmp for cache and chart files. Network access to api.coingecko.com and api.hyperliquid.xyz is required and consistent with the described data sources.

✓ Persistence & Privilege

always:false and no self-modifying or cross-skill configuration. The skill does not request permanent elevated presence or access to other skills' configuration.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install crypto-chart
安装完成后，直接呼叫该 Skill 的名称或使用 /crypto-chart 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial public release

元数据

Slug crypto-chart

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题

Crypto Chart 是什么？

Get cryptocurrency token price and generate candlestick charts via CoinGecko API or Hyperliquid API. Use when user asks for token price, crypto price, price... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 73 次。

如何安装 Crypto Chart？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install crypto-chart」即可一键安装，无需额外配置。

Crypto Chart 是免费的吗？

是的，Crypto Chart 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。

Crypto Chart 支持哪些平台？

Crypto Chart 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Crypto Chart？

由 redf426（@redf426）开发并维护，当前版本 v1.0.0。