valuescan-skill

ValueScan 加密货币主力资金流分析工具。支持资金异动监控、主力动向追踪、鲸鱼地址分析、板块轮动、机会/风险代币识别、大户成本分析。

This skill appears to be a straightforward client for the ValueScan API and requires your ValueScan API Key and Secret Key. Before installing: (1) Confirm you obtained keys from the official site (https://www.valuescan.ai) and use least-privileged keys if possible. (2) Be aware the SDK expects a plaintext credential file at ~/.openclaw/credentials/valuescan.json — storing secrets on disk is convenient but carries local risk; consider file permissions or a safer secret store. (3) The skill will send the API key and signatures only to api.valuescan.io per its code; if you need higher assurance, review the service's privacy/security policies. (4) Note Node.js 16 vs fetch availability: the SDK assumes fetch is available; you may need a runtime that provides it. If you want, I can list the exact lines that read the credential file and build the signature.

Type: OpenClaw Skill Name: valuescan-skill Version: 1.0.6 The ValueScan skill bundle is a legitimate cryptocurrency analysis tool designed to track market trends and on-chain data. The core logic in `script/sdk/vs_api_sign.js` implements standard HMAC-SHA256 request signing for authentication and communicates exclusively with the official `api.valuescan.io` endpoint. Credential handling is restricted to a local configuration file (`~/.openclaw/credentials/valuescan.json`), and the documentation in `SKILL.md` and the `references/` directory contains no evidence of prompt injection, data exfiltration, or malicious execution.