← 返回 Skills 市场
16842
总下载
11
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install crypto-market-data
功能描述
No API KEY needed for free tier. Professional-grade cryptocurrency and stock market data integration for real-time prices, company profiles, and global analytics. Powered by Node.js with zero external dependencies.
安全使用建议
Install only if you are comfortable sending market queries to api.igent.net and caching a temporary provider token in the skill's scripts directory. Do not set API_BASE_URL unless you trust the replacement endpoint, keep the skill directory private, and delete scripts/.token if you want to clear the cached session.
功能分析
Type: OpenClaw Skill
Name: crypto-market-data
Version: 1.0.2
The skill bundle is classified as suspicious due to a critical vulnerability in `scripts/api_client.js`. The `BASE_URL` for API calls can be overridden by the `API_BASE_URL` environment variable. If an attacker can control the environment where this skill runs, they could redirect all API traffic, including the session token stored in `.token`, to an arbitrary malicious server, leading to potential data exfiltration and session hijacking. While the default `BASE_URL` points to a legitimate domain (`https://api.igent.net/api`), the flexibility to override it without explicit sanitization or restriction constitutes a significant security risk, even if not intentionally malicious within the skill's design.
能力评估
Purpose & Capability
The scripts retrieve cryptocurrency and stock market data through read-only GET requests, matching the stated purpose; no trading, account mutation, destructive behavior, broad local indexing, or unrelated data access was found.
Instruction Scope
The documentation provides normal usage guidance and describes automatic authentication; it does not contain prompt overrides, hidden role changes, autonomous background behavior, or instructions to access unrelated user data.
Install Mechanism
The package has no dependencies, no install scripts, and no npm lifecycle hooks; it consists of Node.js scripts using standard libraries.
Credentials
Outbound requests to api.igent.net are expected for market data. The API_BASE_URL environment override can redirect traffic if deliberately set, and the client would also accept plain HTTP in that case, so users should avoid untrusted endpoint overrides.
Persistence & Privilege
The client stores a temporary provider token in scripts/.token and the SKILL.md discloses that behavior, but the file is written with default permissions and the documentation does not fully describe cleanup, lifetime, or local-security implications.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install crypto-market-data - 安装完成后，直接呼叫该 Skill 的名称或使用
/crypto-market-data触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
Major rewrite: Migration from Python to Node.js, and expansion to support stock market data.
- All Python scripts and dependencies removed; replaced by Node.js scripts using only standard libraries.
- Added stock market features: real-time stock quotes, company profiles, and stock ticker search tools.
- Improved and streamlined authentication: session token management now handled via JavaScript and local file storage.
- Updated documentation for new usage patterns, script names, syntax, and supported features.
- No external dependencies required—just Node.js out-of-the-box.
v1.0.1
- fix SSL certificate verification
v1.0.0
- Initial release of Crypto Market Data skill.
- Provides real-time and historical cryptocurrency data with no API key required for free tier.
- Includes scripts for prices, trending coins, top coins, search, detailed coin info, OHLC and historical charts, global stats, and public company treasury data.
- Automatic authentication and rate limiting handled internally.
- Supports agent integration and usage through the provided scripts.
元数据
常见问题
Crypto Market Data Skill (No Key Required) 是什么？
No API KEY needed for free tier. Professional-grade cryptocurrency and stock market data integration for real-time prices, company profiles, and global analytics. Powered by Node.js with zero external dependencies. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 16842 次。
如何安装 Crypto Market Data Skill (No Key Required)？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install crypto-market-data」即可一键安装，无需额外配置。
Crypto Market Data Skill (No Key Required) 是免费的吗？
是的，Crypto Market Data Skill (No Key Required) 完全免费（开源免费），可自由下载、安装和使用。
Crypto Market Data Skill (No Key Required) 支持哪些平台？
Crypto Market Data Skill (No Key Required) 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Crypto Market Data Skill (No Key Required)？
由 Liam（@liam8）开发并维护，当前版本 v1.0.2。
推荐 Skills