Coinbase

Access Coinbase API to fetch balances, get EUR trading pairs, create market or limit crypto orders, and view order history and fills.

What to check before installing: 1) Confirm the skill source and author — registry owner ID (kn7df...) does not match the _meta.json ownerId (@mtrab), which may indicate a copy/paste or provenance issue. 2) The registry metadata declares no credentials but the code requires an API key and a PEM private key file; ensure you provide keys only if you trust the author. 3) Prefer storing private keys in a secure location (environment variables or a secrets manager) rather than a plaintext file next to the script; if you must use files, restrict file permissions and don't commit them to version control. 4) Review the script for any unexpected network endpoints (it contacts https://api.coinbase.com paths, which is expected) and validate that these endpoints match your intended Coinbase environment. 5) Consider running the code in a restricted environment (dedicated VM/container, with least privileges) and test read-only operations (e.g., fetching balances/products) before allowing order creation. 6) If you need higher assurance, request provenance (author identity, signed release) or prefer an officially published Coinbase integration.

Type: OpenClaw Skill Name: openclaw-coinbase Version: 1.0.0 The skill provides a legitimate integration with the Coinbase Developer Platform (CDP) API for trading and account management. The implementation in `scripts/coinbase.py` uses standard JWT authentication and follows Coinbase's official documentation for API interactions, with no evidence of data exfiltration, malicious execution, or prompt injection.