← 返回 Skills 市场
9889
总下载
2
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install crypto-funding-alert
功能描述
Real-time crypto funding rate scanner with smart alerts. Finds negative funding rates for profitable long positions. Supports Binance futures. No API key nee...
安全使用建议
Install only if you treat this as an informational market scanner, not an automated trading advisor. Review the code before using the recommendations, avoid passing unsafe leverage or stop-loss values, be aware it saves scan history locally by default, and do not enable webhook examples unless you are comfortable sending the output to that service.
功能分析
Type: OpenClaw Skill
Name: crypto-funding-alert
Version: 1.0.1
The skill is classified as suspicious due to a potential uncontrolled file write vulnerability in `scan.js`. While the default data storage path is safe (`~/.openclaw/workspace/data/funding-monitor/scan_history.jsonl`), the `--output <path>` command-line argument allows writing the `scan_history.jsonl` file to an arbitrary directory. Although `path.join` is used, which mitigates simple path traversal, it still permits writing to any location the process has permissions for. This could be exploited by an attacker to write files to sensitive system directories if they can control the arguments passed to `scan.js`, leading to potential denial of service or other impacts. There is no evidence of intentional malicious behavior like data exfiltration or remote code execution within the provided code or prompt instructions.
能力评估
Credentials
Network access to Binance public endpoints and local file writes are proportionate for a funding-rate monitor, but the Discord webhook example sends full scan output to a third party and should be treated as opt-in data sharing.
Install Mechanism
Installation is a normal skill install with a Node.js runtime requirement. No dependency install, remote code retrieval, tool wrapping, or privileged setup was found.
Instruction Scope
The instructions describe scanning, local history, cron monitoring, and webhook examples. There is no prompt hijacking or hidden role-change behavior, but the documentation should more clearly separate informational output from enforced trading safeguards.
Persistence & Privilege
The script appends scan history and configuration to a local JSONL file by default under the OpenClaw workspace. This is disclosed in SKILL.md, but it is automatic and not shown in the CLI help as an opt-in choice.
Purpose & Capability
The scanner fetches public Binance futures data, scores negative funding-rate opportunities, and prints trade-like recommendations, which fits the stated purpose; however, claimed safety controls such as leverage, stop-loss, position sizing, and max coin limits are mostly displayed configuration rather than enforced controls.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install crypto-funding-alert - 安装完成后，直接呼叫该 Skill 的名称或使用
/crypto-funding-alert触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
Improved documentation with detailed configuration guide and integration examples
v1.0.0
Initial release: Real-time funding rate scanner with smart alerts, risk management, and signal classification
元数据
常见问题
Crypto Funding Alert 是什么？
Real-time crypto funding rate scanner with smart alerts. Finds negative funding rates for profitable long positions. Supports Binance futures. No API key nee... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 9889 次。
如何安装 Crypto Funding Alert？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install crypto-funding-alert」即可一键安装，无需额外配置。
Crypto Funding Alert 是免费的吗？
是的，Crypto Funding Alert 完全免费（开源免费），可自由下载、安装和使用。
Crypto Funding Alert 支持哪些平台？
Crypto Funding Alert 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Crypto Funding Alert？
由 dagangtj（@dagangtj）开发并维护，当前版本 v1.0.1。
推荐 Skills