← 返回 Skills 市场

Crypto Daily Dashboard

Name: Crypto Daily Dashboard
Author: dagangtj

作者 dagangtj · GitHub ↗ · v1.0.1

cross-platform ⚠ suspicious

525

总下载

当前安装

版本数

在 OpenClaw 中安装

/install crypto-daily-dashboard

功能描述

All-in-one crypto dashboard showing Binance portfolio, BTC/ETH/SOL prices, Fear & Greed index, top funding rates, and economic tracking. Beautiful terminal U...

使用说明 (SKILL.md)

Crypto Daily Dashboard

A comprehensive cryptocurrency financial dashboard that displays:

📊 Binance account balances (spot, futures, total, unrealized PnL)
📈 Major crypto prices (BTC, ETH, SOL) with 24h change
🎭 Fear & Greed Index (market sentiment)
💸 Top funding rates (negative rates = earn by going long)
🏦 Economic tracking (balance, runway, income/expenses)

Features

Beautiful terminal UI with box-drawing characters and emojis
Zero dependencies - uses only Node.js built-ins
Graceful fallbacks - works even without API keys (shows prices & sentiment)
Multi-source data - CoinGecko → Binance fallback for reliability
Configurable - all sensitive data via environment variables

Installation

No installation needed - just configure and run!

Configuration

Required (for Binance balance)

export BINANCE_API_KEY="your_api_key"
export BINANCE_API_SECRET="your_api_secret"

Optional

The dashboard works without API keys - it will show crypto prices and market sentiment using public APIs.

Usage

Basic

node dashboard.js

From OpenClaw

exec node ~/.openclaw/workspace/skills/crypto-daily-dashboard/dashboard.js

As a cron job

Add to your OpenClaw cron:

openclaw cron add "0 9 * * *" "node ~/.openclaw/workspace/skills/crypto-daily-dashboard/dashboard.js" --label "daily-crypto-dashboard"

Output Example

╔══════════════════════════════════════════════╗
║       💰 每日财务仪表盘 | 2026-02-26 09:00   ║
╚══════════════════════════════════════════════╝

📊 Binance 账户
────────────────────────────────────────
  现货: $1,234.56
  合约: $5,678.90
  总计: $6,913.46 USDT
  未实现盈亏: $123.45

📈 主要加密货币
────────────────────────────────────────
  bitcoin     $   65432.10  +2.3%
  ethereum    $    3456.78  -1.2%
  solana      $     123.45  +5.6%

🎭 市场情绪
────────────────────────────────────────
  😊 Greed: 67/100

💸 Funding Rate (负费率=做多赚钱)
────────────────────────────────────────
  BTC      -0.0123%  年化(3x): 13%
  ETH      -0.0089%  年化(3x): 9%

🏦 经济状态
────────────────────────────────────────
  🟢 状态: THRIVING
  💰 余额: $10,000.00
  📈 总收入: $15,000.00
  📉 总支出: $5,000.00
  ⏳ 跑道: 365 天

══════════════════════════════════════════════
💡 记住：不赚钱拔网线 | 安全第一 | 复利增长
══════════════════════════════════════════════

Data Sources

Binance API - account balances and funding rates
CoinGecko API - crypto prices (free tier, no key needed)
Binance Public API - fallback for prices
Alternative.me API - Fear & Greed Index (free, no key needed)

Security

No hardcoded credentials
API keys via environment variables only
Read-only API permissions recommended
No data sent to third parties

Troubleshooting

"无法获取" (Cannot fetch)

Check your internet connection
Verify Binance API keys are set correctly
Ensure API keys have read permissions

Rate limiting

The script uses multiple data sources with fallbacks. If one source is rate-limited, it automatically tries alternatives.

License

MIT

Author

Created for OpenClaw agent ecosystem

安全使用建议

This skill appears to do what it says: it queries public market APIs and can optionally read your Binance balances when you provide BINANCE_API_KEY and BINANCE_API_SECRET. Before installing: 1) If you supply Binance keys, create API keys with read-only permissions only. 2) Be careful with ECONOMIC_TRACKER_PATH — the dashboard will execute the Python script at that path, so only point it at trusted local code. 3) Note the registry metadata omits env var declarations (informational mismatch) — double-check the SKILL.md and code to ensure you set only the needed environment variables. If you're uncertain, run the script in an isolated environment or inspect/modify the dashboard.js source before use.

功能分析

Type: OpenClaw Skill Name: crypto-daily-dashboard Version: 1.0.1 The `dashboard.js` file contains a critical remote code execution (RCE) vulnerability. The `getEconomicStatus` function uses `child_process.execSync` to execute a Python script whose path is directly taken from the `ECONOMIC_TRACKER_PATH` environment variable (`process.env.ECONOMIC_TRACKER_PATH`). This allows an attacker to inject arbitrary shell commands by manipulating this environment variable, leading to command injection. While this is a severe vulnerability, there is no clear evidence of intentional malicious behavior or self-exploitation within the provided files; it appears to be a design flaw rather than malware.

能力评估

ℹ Purpose & Capability

The skill name/description match the code: it fetches prices, funding rates, Fear & Greed index, and (optionally) Binance account balances. Node is the only required binary and is appropriate. One minor mismatch: the registry metadata lists no required env vars, while SKILL.md and the code require BINANCE_API_KEY and BINANCE_API_SECRET (optional for full functionality) and mention ECONOMIC_TRACKER_PATH; the omission in registry metadata is an inconsistency but not itself harmful.

ℹ Instruction Scope

SKILL.md instructs running the included dashboard.js and shows cron usage; the runtime actions match those instructions. All network calls are to the listed public APIs (CoinGecko, Binance endpoints, alternative.me). The code does execute a local Python script when ECONOMIC_TRACKER_PATH is set (via child_process.execSync) and parses its JSON output — this means the skill will execute whatever local script path you provide, which is expected for an optional local economic tracker but is a potential execution risk if the path is untrusted.

✓ Install Mechanism

No install spec or remote downloads are present; files are included in the skill bundle. No external archives or package installs are performed at runtime, so there is low install-time risk.

ℹ Credentials

The environment variables used by the code (BINANCE_API_KEY, BINANCE_API_SECRET, ECONOMIC_TRACKER_PATH, TZ, LANG) align with the feature set. Requesting Binance API credentials is proportionate for fetching account balances; the skill recommends read-only API permissions. Registry-level metadata did not declare these required/optional env vars or a primary credential, which is an administrative inconsistency to be aware of.

✓ Persistence & Privilege

The skill does not request 'always' persistence and does not modify other skills or system-wide agent settings. Model invocation is enabled (the platform default), which is normal for an agent-invocable skill. No elevated or persistent privileges are requested by the skill itself.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install crypto-daily-dashboard
安装完成后，直接呼叫该 Skill 的名称或使用 /crypto-daily-dashboard 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.1

Updated documentation and improved error handling

v1.0.0

Initial release: Binance portfolio, BTC/ETH/SOL prices, Fear & Greed index, funding rates, economic tracking. Zero dependencies, beautiful terminal UI, configurable via env vars.

元数据

Slug crypto-daily-dashboard

版本 1.0.1

许可证 —

累计安装 0

当前安装数 0

历史版本数 2

常见问题