← 返回 Skills 市场

Real-time Crypto Price API

Name: Real-time Crypto Price API
Author: strykragent

作者 StrykrAgent · GitHub ↗ · v1.0.0

cross-platform ✓ 安全检测通过

2925

总下载

当前安装

版本数

在 OpenClaw 中安装

/install realtime-crypto-price-api

功能描述

Provides real-time and historical cryptocurrency prices, market cap rankings, trending tokens, and batch queries for 10,000+ coins via API and CLI.

使用说明 (SKILL.md)

Real-time Crypto Price API

Get real-time cryptocurrency prices for 10,000+ tokens.

Installation

npm install realtime-crypto-price-api

Usage

const { CryptoPrice } = require('realtime-crypto-price-api');

const client = new CryptoPrice();

// Get Bitcoin price
const btc = await client.getPrice('BTC');
console.log(`Bitcoin: $${btc.price}`);

// Get multiple prices
const prices = await client.getPrices(['BTC', 'ETH', 'SOL']);

// Top coins by market cap
const top10 = await client.getTopCoins(10);

// Trending gainers/losers
const gainers = await client.getTrending('gainers');

// Historical OHLCV data
const history = await client.getHistory('ETH', '1d', 30);

// Search tokens
const results = await client.search('pepe');

CLI

# Single price
npx realtime-crypto-price-api BTC

# Multiple prices
npx realtime-crypto-price-api batch BTC,ETH,SOL

# Top coins
npx realtime-crypto-price-api top 20

# Trending
npx realtime-crypto-price-api trending gainers

API Methods

getPrice(symbol) - Single token price with 24h change
getPrices(symbols) - Batch price query
getTopCoins(limit) - Top by market cap
getTrending(direction) - Gainers or losers
getHistory(symbol, interval) - OHLCV candles
search(query) - Find tokens

Data Source

安全使用建议

The package appears to be a straightforward client for the PRISM API and behaves consistently with its description. Before installing: (1) verify the publisher/source (check the npm package page and the GitHub repository cited in package.json) to ensure you're installing the intended package; (2) review recent package versions and maintainers, and run npm audit if you plan to install; (3) only provide a PRISM_API_KEY if you trust the service and scope the key appropriately; (4) if you need higher assurance, inspect the included source files yourself or run the package in an isolated environment. If any publisher metadata is missing or the npm/GitHub pages look suspicious, treat the package as untrusted.

功能分析

Type: OpenClaw Skill Name: realtime-crypto-price-api Version: 1.0.0 The skill bundle provides a legitimate API client for real-time cryptocurrency price data, connecting to `https://api.prismapi.ai`. The code in `src/index.js` and `cli.js` uses standard practices for network requests and argument parsing, including safe URL construction with `URL` and `URL.searchParams.set` to prevent injection. It reads an optional API key from `PRISM_API_KEY` and allows overriding the API endpoint via `PRISM_API_URL` environment variables, which are standard configuration options. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or prompt injection attempts in `SKILL.md` or `README.md`. All observed behaviors align with the stated purpose of providing cryptocurrency price data.

能力评估

ℹ Purpose & Capability

The name, README, SKILL.md and source files all align: this is a client/CLI for PRISM API providing realtime and historical crypto prices. Minor metadata mismatch: registry lists 'Source: unknown' and no homepage, while package.json contains a homepage and repository (https://prismapi.ai and GitHub URL). That is not necessarily malicious but is something to verify (publisher origin/trust).

✓ Instruction Scope

SKILL.md instructs normal usage (npm install, require the package, call client methods, or use the CLI). The runtime instructions and code only perform network calls to the PRISM API base URL (configurable via PRISM_API_URL) and do not read arbitrary files or unrelated environment variables.

✓ Install Mechanism

There is no install spec in the registry (instruction-only), but full source files and a package.json are included. No downloads from untrusted URLs, no extract or external installers—installation is the normal npm package workflow.

ℹ Credentials

Registry metadata lists no required env vars, but the package and README use optional PRISM_API_KEY and PRISM_API_URL environment variables. These are proportional to the stated purpose (auth and custom endpoint). The package will read PRISM_API_KEY from the environment if present, so only set it if you trust the package and upstream API.

✓ Persistence & Privilege

The skill does not request persistent privileges, does not set always:true, and does not modify other skills or system configuration. It simply makes network requests when invoked.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install realtime-crypto-price-api
安装完成后，直接呼叫该 Skill 的名称或使用 /realtime-crypto-price-api 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release - real-time cryptocurrency prices for 10,000+ tokens

元数据

Slug realtime-crypto-price-api

版本 1.0.0

许可证 —

累计安装 14

当前安装数 13

历史版本数 1

常见问题