← 返回 Skills 市场

Crypto Funding Monitor

Name: Crypto Funding Monitor
Author: zhdryanchang

作者 zhdryanchang · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

281

总下载

当前安装

版本数

在 OpenClaw 中安装

/install crypto-funding-monitor

功能描述

实时监测加密货币项目融资和TEG信息，支持Telegram、Discord、Email多渠道推送及定时简报。

使用说明 (SKILL.md)

Crypto Funding Monitor

实时监测加密货币项目融资和TEG信息的智能skill，支持多平台推送。

功能特性

🔍 多平台监测: RootData、X (Twitter) 等平台
📊 融资信息: 最新融资轮次、金额、投资方
🚀 TEG项目: Token Generation Event 项目追踪
📱 多渠道推送: Telegram、Discord、Email
💰 付费调用: 通过 SkillPay.me 集成，每次调用 0.001 USDT
⏰ 定时推送: 每日定时简报

使用方法

API 端点

POST /monitor

触发一次监测并推送简报

请求参数:

{
  "userId": "user123",
  "transactionId": "tx456",
  "channels": {
    "telegram": { "chatId": "123456789" },
    "discord": true,
    "email": { "to": "[email protected]" }
  }
}

POST /subscribe

订阅定时推送服务

请求参数:

{
  "userId": "user123",
  "channels": {
    "telegram": { "chatId": "123456789" },
    "email": { "to": "[email protected]" }
  },
  "schedule": ["0 9 * * *", "0 18 * * *"]
}

POST /unsubscribe

取消订阅

请求参数:

{
  "userId": "user123"
}

配置

需要配置以下环境变量：

SKILLPAY_API_KEY: SkillPay API密钥（必需）
TELEGRAM_BOT_TOKEN: Telegram Bot令牌（可选）
DISCORD_WEBHOOK_URL: Discord Webhook URL（可选）
EMAIL_USER/EMAIL_PASS: SMTP邮箱配置（可选）
TWITTER_BEARER_TOKEN: Twitter API令牌（可选）

定价

每次调用: 0.001 USDT
通过 SkillPay.me 自动结算

数据源

RootData: 加密项目融资数据库
Twitter/X: 实时融资动态
支持扩展更多数据源

推送渠道

Telegram: Bot推送到个人或群组
Discord: Webhook推送到频道
Email: SMTP邮件推送

定时任务

默认推送时间：

早上 9:00
晚上 18:00

可通过环境变量自定义。

技术栈

Node.js + Express
SkillPay.me 支付集成
RootData + Twitter 数据源
Telegram + Discord + Email 推送
node-cron 定时任务

许可证

MIT

安全使用建议

This package mostly does what it says, but it ships with a SkillPay API key embedded in skill.json and in the docs. That is a red flag: do NOT run this skill in production or expose it to real users until you address the credential issue. Actions to consider before installing/running: 1) Remove any hard-coded API keys from the repository (skill.json, QUICKSTART.md, README.md) and replace them with placeholder values. 2) Use your own SkillPay API key (never the one in the package). Rotate/revoke the embedded key with SkillPay if possible. 3) Audit network endpoints the skill calls (SkillPay, RootData, Twitter, any webhooks) and ensure you trust those services. 4) Run the skill in an isolated test environment (not on machines hosting sensitive data) and review logs/traffic to confirm no unexpected exfiltration. 5) If you plan to publish this skill, update registry metadata to declare required env vars, and remove secrets from all files. If you are unsure who owns the included SkillPay key, treat it as untrusted and replace it before use.

功能分析

Type: OpenClaw Skill Name: crypto-funding-monitor Version: 1.0.0 The Crypto Funding Monitor skill is a well-structured and professionally documented tool designed to track cryptocurrency project financing and Token Generation Events (TGE). The code implements legitimate scraping of RootData and Twitter, integrates with the SkillPay.me platform for monetization, and provides notification services via Telegram, Discord, and Email. Analysis of the source code (src/index.js, src/payment.js, etc.) and the extensive documentation (SKILL.md, USAGE.md) reveals no evidence of malicious intent, data exfiltration, or prompt injection attacks; all network and data access behaviors are strictly aligned with the stated purpose of the skill.

能力评估

ℹ Purpose & Capability

The code implements monitoring, scraping (RootData, Twitter/X) and multi-channel notifications (Telegram, Discord, Email) and integrates SkillPay for per-call billing — all of which align with the stated purpose. However the registry metadata claims no required environment variables while the SKILL.md, code, and docs require a SKILLPAY_API_KEY and several optional service credentials; this metadata mismatch is incoherent.

✓ Instruction Scope

SKILL.md and the code only instruct the agent to scrape the stated sources and send notifications to the declared channels; the runtime instructions do not request unrelated system files or arbitrary data. They do, however, direct data to multiple external services (SkillPay, RootData, Twitter, Discord, Telegram, SMTP) which is expected for the feature set but important to note.

✓ Install Mechanism

There is no custom install script that downloads arbitrary code; dependencies are normal npm packages listed in package.json/package-lock.json. quickstart.sh runs npm install and starts the server. No suspicious third-party download URLs or extract-from-URL steps were found.

⚠ Credentials

Requiring service credentials (Telegram bot token, Discord webhook, SMTP creds, Twitter bearer token, RootData API key, and a SkillPay API key) is proportionate to the declared features — except that the repository/documentation include a concrete SKILLPAY_API_KEY value and skill.json contains an apiKey field. Shipping a real API key inside the package or docs is unnecessary and dangerous (allows the publisher to receive payments or verify/track calls). Also registry metadata listing zero required env vars contradicts the obvious runtime requirements.

ℹ Persistence & Privilege

The skill does not request platform-level privileges or set always: true. However, embedding a SkillPay API key in the package/documentation effectively grants the publisher an ongoing credential (persistence of secret) that could be used externally. That increases blast radius: the skill will make scheduled network calls and could log usage to the remote payment endpoint.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install crypto-funding-monitor
安装完成后，直接呼叫该 Skill 的名称或使用 /crypto-funding-monitor 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release: Monitor crypto funding rounds and TEG projects with SkillPay integration

元数据

Slug crypto-funding-monitor

版本 1.0.0

许可证 —

累计安装 0

当前安装数 0

历史版本数 1

常见问题