← 返回 Skills 市场

Crypto Short Signal Generator

Name: Crypto Short Signal Generator
Author: dennyhuang2024

作者 dennyhuang2024 · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

371

总下载

当前安装

版本数

在 OpenClaw 中安装

/install crypto-short-signal

功能描述

Generates short signals predicting 30%+ coin drops within 7 days based on historical token unlock schedules and price trends analysis.

使用说明 (SKILL.md)

Crypto Short Signal Generator

Version: 2.0.0 (Two-Layer Architecture)
Author: Denny Huang
Description: Know which coins will drop 30%+ 7 days in advance based on historical token unlock data

🏗️ Architecture

This skill uses a two-layer architecture for security and scalability:

Public Layer (ClawHub)

SkillPay billing interface
Basic validation
Calls paid layer API

Paid Layer (SkillPay Cloud)

Core analysis logic
Token database
API Key (secured)

📖 Overview

This skill analyzes token unlock schedules and generates short signals based on historical data. Historical win rate: 78%.

🎯 Features

Query token unlock dates
Analyze pre/post unlock price trends
Generate short signals (entry/exit/stop-loss)
Risk assessment report

💰 Pricing

Single Query: 0.001 USDT
Batch Query (5 tokens): 0.005 USDT

Payment: BNB Chain USDT via SkillPay

📊 Supported Tokens

Token	Unlock Date	Unlock Amount	Expected Drop
ZRO	2026-03-20	32.6M (3.26%)	-5.97%
BARD	2026-03-18	11.35M (1.14%)	-4.0%
STABLE	2027-01-01	TBD	TBD

🚀 Usage

Basic Query

{
  "token": "ZRO"
}

Response

{
  "status": "success",
  "data": {
    "token": "ZRO",
    "name": "LayerZero",
    "unlock_date": "2026-03-20",
    "unlock_amount": "32.6M",
    "unlock_percent": "3.26%",
    "circulating_ratio": "20.26%",
    "fdv_mcap": "4.94x",
    "risk_level": "高",
    "short_signal": {
      "short_start": "2026-03-13",
      "short_end": "2026-03-19",
      "target_drop": "-5.97%",
      "target_price": "$0.94",
      "stop_loss": "$1.10",
      "win_rate": "78%"
    }
  }
}

⚠️ Disclaimer

This skill is for reference only and does not constitute investment advice. Cryptocurrency markets are highly volatile. Users trade at their own risk. Historical performance does not guarantee future results.

🔗 Links

Created: 2026-03-05
Updated: 2026-03-05
Architecture: Two-Layer (Public + Paid)

安全使用建议

This skill implements a paid public layer and forwards requests to a paid API, which is coherent with its description — but the repository contains a hard-coded SkillPay API key and its metadata claims no required env vars while config.json marks SKILLPAY_API_KEY as required. Before installing: (1) Do not trust or use the embedded API key — treat it as leaked/compromised; prefer to set your own SKILLPAY_API_KEY in the environment. (2) If you plan to deploy or pay for this skill, rotate any keys the author published and avoid using their credentials. (3) Consider running the paid layer (api.js) on infrastructure you control or confirm SkillPay/author trustworthiness. (4) Review network endpoints and logs to ensure user identifiers or other sensitive data are not being sent anywhere unexpected. (5) Be cautious using this for live trading — the skill includes a disclaimer and historical metrics but trading risk and legal/regulatory concerns remain. If you need a safer posture, request the author remove embedded keys and update the registry metadata to declare required env vars correctly, or refuse to install the skill.

功能分析

Type: OpenClaw Skill Name: crypto-short-signal Version: 1.0.0 The skill contains a hardcoded sensitive API key (sk_0e14dceabeea3a6371770165736b89add613f7ab8f729c57aef555525b0f1a00) across multiple files including index.js, api.js, and config.json. While the logic appears consistent with its stated purpose of providing crypto signals and managing payments via the 'SkillPay' service (skillpay.me), hardcoding credentials is a major security vulnerability. There is no clear evidence of intentional malice or data exfiltration, but the handling of financial transactions and the exposure of secrets justify a suspicious classification.

能力评估

ℹ Purpose & Capability

The skill is a paid two-layer crypto signal generator and the code implements billing and a paid API call, which is consistent with the stated purpose. However, the registry metadata supplied to the evaluator lists no required environment variables or credentials while config.json and the code declare SKILLPAY_API_KEY as required — a clear metadata/requirement mismatch.

✓ Instruction Scope

SKILL.md and the code limit runtime actions to billing (SkillPay) and calling the paid analysis API; they do not instruct reading unrelated system files or environment variables beyond SkillPay-related settings. The public layer validates input, charges users, and forwards requests to the paid layer as described.

✓ Install Mechanism

There is no install spec (instruction-only install) and only Node.js source files are included. No external arbitrary download URLs or unusual installers are used. This is low-risk from an install mechanism perspective.

⚠ Credentials

The bundle contains an embedded SkillPay API key in config.json and both index.js/api.js default to that same key if SKILLPAY_API_KEY is not set. The registry metadata claims no required env vars, but config.json marks SKILLPAY_API_KEY as required. Hard-coded operational keys in the repo are disproportionate and dangerous (credential leak / potential misuse).

✓ Persistence & Privilege

The skill does not request always:true, does not modify other skills or system-wide configuration, and is user-invocable only. It does not request elevated persistence or cross-skill privileges.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install crypto-short-signal
安装完成后，直接呼叫该 Skill 的名称或使用 /crypto-short-signal 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Know which coins will drop 30%+ 7 days in advance

元数据

Slug crypto-short-signal

版本 1.0.0

许可证 —

累计安装 0

当前安装数 0

历史版本数 1

常见问题