← 返回 Skills 市场
16181
总下载
11
收藏
98
当前安装
3
版本数
在 OpenClaw 中安装
/install crypto-market-data
功能描述
No API KEY needed for free tier. Professional-grade cryptocurrency and stock market data integration for real-time prices, company profiles, and global analytics. Powered by Node.js with zero external dependencies.
安全使用建议
Install only if you are comfortable sending requested symbols, coin IDs, currencies, and search terms to api.igent.net. Keep the skill directory private, avoid setting API_BASE_URL unless you trust the replacement service, and delete scripts/.token if you want to clear the cached provider session.
功能分析
Type: OpenClaw Skill
Name: crypto-market-data
Version: 1.0.2
The skill bundle is classified as suspicious due to a critical vulnerability in `scripts/api_client.js`. The `BASE_URL` for API calls can be overridden by the `API_BASE_URL` environment variable. If an attacker can control the environment where this skill runs, they could redirect all API traffic, including the session token stored in `.token`, to an arbitrary malicious server, leading to potential data exfiltration and session hijacking. While the default `BASE_URL` points to a legitimate domain (`https://api.igent.net/api`), the flexibility to override it without explicit sanitization or restriction constitutes a significant security risk, even if not intentionally malicious within the skill's design.
能力评估
Purpose & Capability
The scripts fetch crypto and stock prices, searches, profiles, charts, and market statistics through GET requests, matching the stated market-data purpose; no trading, account mutation, destructive behavior, or unrelated local data access was found.
Instruction Scope
The skill documentation gives normal command examples and authentication details, without prompt overrides, hidden autonomy, public posting, moderation, or broad local indexing instructions.
Install Mechanism
The package declares no dependencies, no install scripts, and no npm lifecycle hooks; it consists of Node.js scripts using standard libraries.
Credentials
Network access to the default market-data API is expected for the purpose. The API_BASE_URL environment override can redirect requests if the local environment is controlled, so users should not set it to untrusted services.
Persistence & Privilege
The client automatically stores a temporary provider token in scripts/.token for reuse, and SKILL.md discloses this behavior. The file is written with default filesystem permissions rather than an explicit restrictive mode, which is a hardening gap on shared systems.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install crypto-market-data - 安装完成后，直接呼叫该 Skill 的名称或使用
/crypto-market-data触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
Major rewrite: Migration from Python to Node.js, and expansion to support stock market data.
- All Python scripts and dependencies removed; replaced by Node.js scripts using only standard libraries.
- Added stock market features: real-time stock quotes, company profiles, and stock ticker search tools.
- Improved and streamlined authentication: session token management now handled via JavaScript and local file storage.
- Updated documentation for new usage patterns, script names, syntax, and supported features.
- No external dependencies required—just Node.js out-of-the-box.
v1.0.1
- fix SSL certificate verification
v1.0.0
- Initial release of Crypto Market Data skill.
- Provides real-time and historical cryptocurrency data with no API key required for free tier.
- Includes scripts for prices, trending coins, top coins, search, detailed coin info, OHLC and historical charts, global stats, and public company treasury data.
- Automatic authentication and rate limiting handled internally.
- Supports agent integration and usage through the provided scripts.
元数据
常见问题
Crypto Market Data Skill (No Key Required) 是什么？
No API KEY needed for free tier. Professional-grade cryptocurrency and stock market data integration for real-time prices, company profiles, and global analytics. Powered by Node.js with zero external dependencies. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 16181 次。
如何安装 Crypto Market Data Skill (No Key Required)？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install crypto-market-data」即可一键安装，无需额外配置。
Crypto Market Data Skill (No Key Required) 是免费的吗？
是的，Crypto Market Data Skill (No Key Required) 完全免费（开源免费），可自由下载、安装和使用。
Crypto Market Data Skill (No Key Required) 支持哪些平台？
Crypto Market Data Skill (No Key Required) 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Crypto Market Data Skill (No Key Required)？
由 Liam（@liam8）开发并维护，当前版本 v1.0.2。
推荐 Skills