← 返回 Skills 市场
marsbit-crypto-flash-skill
作者
xinyi-drink
· GitHub ↗
· v1.0.9
· MIT-0
246
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install marsbit-crypto-flashskill
功能描述
Crypto-native Web3 news and flash intelligence from MarsBit through hosted MCP. Use this for L1/L2 ecosystems, DeFi/CeFi, regulation, exchange flows, and mar...
安全使用建议
Before installing: 1) Verify the upstream repository (https://github.com/domilin/marsbit-crypto-news-skill) and confirm the package.json honestly reflects needed capabilities — ask the author why 'exec' and 'read' are declared. 2) Recognize that queries and any user-provided context will be sent to https://www.marsbit.co/api/mcp (privacy risk). 3) If you want minimal risk, restrict the skill from being invoked autonomously or run it in a sandboxed account. 4) If you must install, inspect the repository contents locally for unexpected scripts and prefer the ClawHub install path over manual GitHub installs if you trust ClawHub. If the author cannot justify the extra tool permissions, treat the skill as over-privileged and avoid installing it.
功能分析
Type: OpenClaw Skill
Name: marsbit-crypto-flashskill
Version: 1.0.9
The MarsBit Crypto News Skill is a legitimate tool designed to fetch Web3 and cryptocurrency news from a hosted MCP endpoint (https://www.marsbit.co/api/mcp). It uses standard curl commands to interact with the API and provides clear instructions for the agent to parse and format news data. No evidence of data exfiltration, malicious execution, or unauthorized system access was found in SKILL.md or package.json.
能力评估
Purpose & Capability
The SKILL.md and README describe a hosted-MCP news/flash fetcher that only needs outbound HTTP (curl). However package.json declares OpenClaw 'tools' dependencies including 'exec' and 'read' which are not used or documented in the runtime instructions — this grants the skill broader local access than its stated purpose requires.
Instruction Scope
The runtime instructions are narrowly scoped to making POST requests to the hosted MCP endpoint (https://www.marsbit.co/api/mcp) via curl and parsing returned JSON. They do not instruct reading local files, environment variables, or forwarding data to other endpoints.
Install Mechanism
The only install action is a brew formula for curl (a well-known package) and optional instructions to clone from GitHub. No arbitrary downloads or extract-from-unknown-URLs are present.
Credentials
No environment variables or credentials are requested (good). But package.json's declared tool dependencies ('exec', 'read') are disproportionate: 'read' could allow access to local files and 'exec' to run arbitrary commands, neither of which are required by the SKILL.md. This is an unnecessary escalation of access.
Persistence & Privilege
The skill is not always-on and is user-invocable (default). Autonomous invocation is permitted by platform default; combined with the extra 'exec'/'read' tool grants this could increase blast radius. There is no evidence the skill modifies other skills or system-wide settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install marsbit-crypto-flashskill - 安装完成后，直接呼叫该 Skill 的名称或使用
/marsbit-crypto-flashskill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.9
No changes detected in this release.
- No modifications were made to the code or documentation.
- All features and capabilities remain as in the previous version.
元数据
常见问题
marsbit-crypto-flash-skill 是什么？
Crypto-native Web3 news and flash intelligence from MarsBit through hosted MCP. Use this for L1/L2 ecosystems, DeFi/CeFi, regulation, exchange flows, and mar... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 246 次。
如何安装 marsbit-crypto-flash-skill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install marsbit-crypto-flashskill」即可一键安装，无需额外配置。
marsbit-crypto-flash-skill 是免费的吗？
是的，marsbit-crypto-flash-skill 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
marsbit-crypto-flash-skill 支持哪些平台？
marsbit-crypto-flash-skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（darwin, linux, win32）。
谁开发了 marsbit-crypto-flash-skill？
由 xinyi-drink（@domilin）开发并维护，当前版本 v1.0.9。
推荐 Skills