← 返回 Skills 市场

Crypto Portfolio Tracker Pro

Name: Crypto Portfolio Tracker Pro
Author: dagangtj

作者 dagangtj · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

254

总下载

当前安装

版本数

在 OpenClaw 中安装

/install crypto-portfolio-tracker-pro

功能描述

Real-time cryptocurrency portfolio tracking and analysis. Monitors multiple wallets and exchanges, calculates P&L, tracks performance metrics, and provides a...

使用说明 (SKILL.md)

Crypto Portfolio Tracker

Track and analyze cryptocurrency portfolios across multiple wallets and exchanges with real-time data.

Features

Multi-platform portfolio aggregation (Binance, Coinbase, wallets)
Real-time P&L calculation
Price alerts and notifications
Performance analytics and reports
Asset allocation visualization

Quick Start

Track Portfolio

node scripts/track_portfolio.js

Returns current holdings, total value, and 24h change.

Set Price Alert

node scripts/set_alert.js --symbol BTC --price 50000 --direction above

Generate Report

node scripts/generate_report.js --period 7d

Configuration

Portfolio sources are configured in references/config.json:

{
  "exchanges": ["binance", "coinbase"],
  "wallets": ["0x..."],
  "alerts": {
    "telegram": true,
    "email": false
  }
}

Data Sources

CoinGecko API (free, no key required)
Binance API (optional, for exchange balances)
Blockchain explorers (for wallet tracking)

Pricing

Free: Basic tracking, 1 portfolio, hourly updates
Pro ($9.99/month): Unlimited portfolios, real-time updates, advanced analytics
Enterprise ($49.99/month): API access, custom alerts, priority support

安全使用建议

This skill is inconsistent: its description promises multi-exchange/wallet aggregation and a report script, but the included scripts are simple local tools (a static portfolio tracker hitting CoinGecko and an alert writer) and a generate_report.js referenced in the docs is missing. Before installing or running: 1) Inspect scripts yourself (you already have them) — they do not exfiltrate data or contact unknown endpoints; track_portfolio.js only queries api.coingecko.com. 2) Do not paste real API keys into references/config.json or run the skill in a context with secrets until you confirm the code actually needs and safely handles them. 3) Note that set_alert.js will create references/alerts.json in the repo — check file permissions and content. 4) Ask the publisher for source/homepage and a complete release (missing generate_report.js and no homepage). 5) If you intend to enable exchange or wallet integrations, prefer running the code in a sandboxed environment and store keys in a secure secret manager rather than plaintext config files. If you want, I can point out the exact lines that would need changing to read config.json or to add exchange/wallet support.

功能分析

Type: OpenClaw Skill Name: crypto-portfolio-tracker-pro Version: 1.0.0 The skill bundle provides a standard cryptocurrency portfolio tracker and price alert system using the public CoinGecko API. The scripts (track_portfolio.js and set_alert.js) perform basic data fetching and local file I/O without any evidence of malicious intent, data exfiltration, or command injection. While the config.json file includes placeholders for sensitive API keys, the provided code does not currently implement any logic to exfiltrate or misuse them.

能力评估

⚠ Purpose & Capability

The name/description promise multi-platform portfolio aggregation (Binance, Coinbase, wallet tracking), real-time updates, alerts, and report generation. The included code does not implement those integrations: track_portfolio.js uses a hard-coded PORTFOLIO constant and only queries CoinGecko; it does not read references/config.json, does not call exchange or blockchain explorer APIs, and does not accept wallet addresses. SKILL.md also documents a generate_report.js command that is not present. These mismatches mean the skill does not deliver the claimed capabilities and may mislead users about what data it needs.

⚠ Instruction Scope

SKILL.md instructs users to configure references/config.json (which contains API key placeholders) and to run scripts including generate_report.js (missing). However, the runnable scripts do not read or use that config.json (track_portfolio uses an internal PORTFOLIO) and set_alert writes to references/alerts.json. The instructions are therefore out-of-sync with the actual runtime behavior, granting the agent vague authority ('use when you need to monitor wallets/exchanges') that the code does not exercise.

✓ Install Mechanism

No install spec and no external downloads — instruction-only plus two small JS scripts. No archives, no third-party package installs, and no unusual install behavior identified.

ℹ Credentials

The skill requires no environment variables and no primary credential. references/config.json contains placeholders for exchange API keys and Telegram SMTP settings (empty by default). That by itself is not malicious, but because the README suggests exchange/wallet integration while the code doesn't use those keys, a user could be misled into supplying sensitive keys later (or in a future version of the skill).

✓ Persistence & Privilege

The skill does not request elevated or persistent platform privileges (always:false). It will create/write references/alerts.json when set_alert.js runs, which is normal for a local alerts store.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install crypto-portfolio-tracker-pro
安装完成后，直接呼叫该 Skill 的名称或使用 /crypto-portfolio-tracker-pro 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release: Real-time portfolio tracking, price alerts, multi-platform support

元数据

Slug crypto-portfolio-tracker-pro

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题