← 返回 Skills 市场
503
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install fia-signals-skill
功能描述
AI crypto market intelligence from Fía Signals. 65+ endpoints covering price predictions, technical analysis (RSI MACD EMA Bollinger), market sentiment, smar...
使用说明 (SKILL.md)
Fía Signals — Crypto Market Intelligence
Real-time crypto data for AI agents. 56 endpoints. Free tier works instantly — no keys, no signup.
API Base URL
https://api.fiasignals.com
Free Endpoints (no auth, no payment)
| Endpoint | Description |
|---|---|
/v1/gas/prices |
Multi-chain gas prices (Ethereum, Base, Arbitrum, Polygon, Optimism) |
/v1/gas/prices/{chain} |
Gas prices for a specific chain |
/v1/gas/history/{chain} |
Gas price history |
/v1/solana/trending |
Top 20 trending Solana tokens with price, liquidity, volume |
/v1/solana/staking |
Solana staking rates and validator info |
/v1/solana/top-wallets |
Most active Solana wallets |
/v1/mev/bots |
Known MEV bot addresses and activity |
/v1/dd/quick/{symbol} |
Quick due diligence report for any crypto asset |
/v1/research/topics |
Current crypto research topics and papers |
/v1/yield/rates |
Best DeFi yield rates across protocols |
/v1/health |
API health check |
Premium Endpoints (x402 USDC payment)
| Endpoint | Price | Description |
|---|---|---|
/v1/solana/new-launches |
$0.005 | Newly launched Solana tokens |
/v1/solana/new-pools |
$0.005 | New liquidity pools |
/v1/solana/smart-money |
$0.01 | Smart money wallet tracking |
/v1/solana/whales |
$0.01 | Whale movement alerts |
/v1/solana/yields |
$0.005 | Solana-specific yield opportunities |
/v1/mev/scan |
$0.01 | Full MEV risk scan for a transaction |
/v1/audit/quick/{address} |
$0.05 | Quick smart contract risk assessment |
/v1/audit/report |
$0.50 | Full smart contract audit report |
/v1/wallet/risk |
$0.02 | Wallet risk scoring |
/v1/wallet/profile/{address} |
$0.02 | Complete wallet profile and PnL |
Usage
# Free — works immediately
~/.openclaw/workspace/skills/fia-signals-skill/scripts/fia_signals.sh gas
~/.openclaw/workspace/skills/fia-signals-skill/scripts/fia_signals.sh trending
~/.openclaw/workspace/skills/fia-signals-skill/scripts/fia_signals.sh yields
~/.openclaw/workspace/skills/fia-signals-skill/scripts/fia_signals.sh dd BTC
~/.openclaw/workspace/skills/fia-signals-skill/scripts/fia_signals.sh mev-bots
~/.openclaw/workspace/skills/fia-signals-skill/scripts/fia_signals.sh research
~/.openclaw/workspace/skills/fia-signals-skill/scripts/fia_signals.sh staking
# Premium — requires x402 USDC payment
~/.openclaw/workspace/skills/fia-signals-skill/scripts/fia_signals.sh whales
~/.openclaw/workspace/skills/fia-signals-skill/scripts/fia_signals.sh smart-money
~/.openclaw/workspace/skills/fia-signals-skill/scripts/fia_signals.sh new-launches
~/.openclaw/workspace/skills/fia-signals-skill/scripts/fia_signals.sh audit 0xContractAddress
Data Source
Live data from Fía Signals API: https://api.fiasignals.com Discovery doc: https://x402.fiasignals.com/.well-known/x402.json Contact: [email protected]
安全使用建议
This skill appears to do exactly what it says: make HTTP requests to a Fía Signals API and print results. Before installing, verify the API hostname and origin (api.fiasignals.com / x402.fiasignals.com) and that you trust that service. Test free endpoints manually (curl the /preview or /health endpoints) to confirm behavior. Note documentation inconsistencies (endpoint counts, minor version mismatches) — these are likely harmless but worth checking. The skill does not request or store secrets, and premium endpoints indicate payment required (the script only prints a payment URL and does not automatically charge), but be cautious about an agent making repeated automated calls to premium endpoints if you enable autonomous invocation. If you need stronger assurance, ask the publisher for a canonical repository or TLS certificate details and confirm the contact address ([email protected]).
功能分析
Type: OpenClaw Skill
Name: fia-signals-skill
Version: 2.1.0
The `scripts/fia_signals.sh` file contains a critical shell injection vulnerability. User-supplied arguments (e.g., `CHAIN`, `SYM`, `ADDR`) are directly interpolated into the `curl` command string without proper sanitization or quoting. This allows an attacker to inject arbitrary shell commands by crafting specific input, leading to potential Remote Code Execution (RCE) on the agent's system. For example, `fia_signals.sh dd 'BTC; malicious_command'` would execute `malicious_command`. While this is a severe flaw, there is no clear evidence of intentional malicious behavior (e.g., data exfiltration, persistence, or unauthorized remote control) designed by the skill's author, thus classifying it as suspicious rather than malicious.
能力评估
Purpose & Capability
Name/description promise (crypto market intelligence, many endpoints) matches the contained artifacts: SKILL.md, README, package.json and the shell script all call a Fía Signals API and expose free vs premium endpoints. There are minor copy inconsistencies (SKILL.md mentions '65+ endpoints' while README/package mention '56' and version strings vary), but these are documentation issues, not functional mismatches.
Instruction Scope
The runtime instructions and the shell script only perform HTTP GETs to the documented API base (api.fiasignals.com or x402.fiasignals.com) and print results. The script does not read local config files, environment variables, credentials, or hidden system paths; it does not exfiltrate data. Help/discovery output is limited to the API URLs and usage examples.
Install Mechanism
No install spec is present (instruction-only plus a small helper script). No downloads, no archive extraction, and no package manager installs. The README mentions curl/python3 as common prerequisites; the script relies only on curl which is typical and low risk.
Credentials
The skill declares no required environment variables, no primary credential, and the script does not access environment secrets. All network calls go to the API hosts documented in the SKILL.md/README. There are no requests for unrelated credentials or config paths.
Persistence & Privilege
The skill is not always-enabled, does not request elevated agent privileges, and does not modify other skills or global agent settings. It is a passive client that issues API requests when invoked.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install fia-signals-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/fia-signals-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v2.1.0
Keyword-optimised descriptions. 65+ endpoints. Price prediction, technical analysis, smart money, DeFi, gas, Solana, MEV, regime detection.
v2.0.0
Major update: Expanded from market analysis to 56 endpoints covering broad crypto intelligence, including Solana, gas, DeFi, MEV, audit, and wallet risk.
- Added new API base URL and standardized all endpoints under `/v1/`.
- Introduced 50+ new endpoints for gas prices, Solana tracking, DeFi yields, MEV bot detection, wallet profiling, smart contract auditing, and research.
- Free tier endpoints are available instantly; premium endpoints/services listed with pricing in x402 USDC.
- Updated usage examples and command-line interface to support new actions and endpoints.
- Revised documentation to reflect expanded capabilities and new data sources.
v1.1.0
- Added detailed SKILL.md documentation describing available endpoints and usage.
- Clarified supported real-time crypto data and technical analysis features.
- Included usage examples for each endpoint.
- Listed contact information and data source link.
元数据
常见问题
Fía Signals 是什么？
AI crypto market intelligence from Fía Signals. 65+ endpoints covering price predictions, technical analysis (RSI MACD EMA Bollinger), market sentiment, smar... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 503 次。
如何安装 Fía Signals？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install fia-signals-skill」即可一键安装，无需额外配置。
Fía Signals 是免费的吗？
是的，Fía Signals 完全免费（开源免费），可自由下载、安装和使用。
Fía Signals 支持哪些平台？
Fía Signals 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Fía Signals？
由 Odds7（@odds7）开发并维护，当前版本 v2.1.0。
推荐 Skills