← 返回 Skills 市场
vs-test
作者
ValueScan-ai
· GitHub ↗
· v1.0.1
· MIT-0
74
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install vs-test
功能描述
ValueScan数据查询Skill。支持代币搜索、K线数据、主力资金流分析、链上数据查询等加密货币市场数据分析功能。
安全使用建议
This skill implements ValueScan API calls and legitimately needs an API key and Secret for HMAC signing, but the package metadata failed to declare that. Before installing: (1) Confirm how the skill expects credentials — the SDK reads ~/.openclaw/credentials/valuescan.json, whereas registry metadata claims no config paths; decide whether you are comfortable storing keys there. (2) Only provide a keyspair with minimal privileges (rotate or revoke if unsure). (3) Verify the skill source and homepage (https://www.valuescan.ai) and prefer registering API keys via the official developer portal. (4) If you need stricter isolation, run the skill in a sandboxed agent or deny file-system access to the home directory. (5) Ask the publisher to correct registry metadata to explicitly declare required credentials and config paths, and/or change the SDK to accept credentials from declared env vars rather than an undeclared file.
功能分析
Type: OpenClaw Skill
Name: vs-test
Version: 1.0.1
The skill bundle is a legitimate integration for the ValueScan cryptocurrency data API. It contains a Node.js SDK (vs_api_sign.js) that implements standard HMAC-SHA256 request signing and a comprehensive set of API reference definitions in the references/ directory. Credential handling is performed locally via ~/.openclaw/credentials/valuescan.json, and all network requests are directed to the official api.valuescan.io domain. No evidence of malicious intent, data exfiltration, or prompt injection was found.
能力标签
能力评估
Purpose & Capability
Name/description match a cryptocurrency data API and the code + references implement many ValueScan endpoints — that is coherent. However the registry metadata claims no required credentials or config paths while SKILL.md and the included SDK require API Key/Secret; this metadata omission is inconsistent and reduces transparency.
Instruction Scope
SKILL.md describes only ValueScan API usage (K-lines, fund flows, on-chain data). The included SDK code (script/sdk/vs_api_sign.js) reads credentials from a local file (~/.openclaw/credentials/valuescan.json) and performs signed POSTs to https://api.valuescan.io — the network calls are to the expected host. The concern is that the runtime instructions and SDK access a local credentials file which was not declared in the registry metadata; the skill therefore accesses local filesystem state (the credentials file) outside what the metadata advertised.
Install Mechanism
No install spec (instruction-only + small SDK file). No remote downloads or extraction. The SDK uses only built-in Node modules (crypto/fs/url) and contains a small example; risk from install mechanisms is low.
Credentials
SKILL.md declares two required credentials (api_key and secret_key) and the SDK requires valuescanApiKey/valuescanSecretKey — these are proportionate for calling the API. But the registry metadata lists no required env vars and no config paths; the SDK instead expects a credential file at ~/.openclaw/credentials/valuescan.json. That mismatch is a proportionality/transparency problem: the skill needs secrets (normal) but fails to declare how it expects them to be provided (env vs config file) in the registry metadata.
Persistence & Privilege
always is false and the skill does not request system-wide privileges. It reads a credential file in the user's home directory but does not modify other skills or system configs. Autonomous invocation is allowed (platform default) — combine this with the credential access mismatch when deciding trust.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install vs-test - 安装完成后，直接呼叫该 Skill 的名称或使用
/vs-test触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
vs-test 1.0.1
- Added detailed SKILL.md documentation, including API usage scenarios, endpoint descriptions, parameters, and integration guide.
- SKILL.md provides a comprehensive reference for ValueScan cryptocurrency data analysis capabilities.
- Outlines quick start instructions and detailed directory structure for easy onboarding and development.
- Specifies authentication, parameter acquisition, and common use cases for end users.
元数据
常见问题
vs-test 是什么？
ValueScan数据查询Skill。支持代币搜索、K线数据、主力资金流分析、链上数据查询等加密货币市场数据分析功能。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 74 次。
如何安装 vs-test？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install vs-test」即可一键安装，无需额外配置。
vs-test 是免费的吗？
是的，vs-test 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
vs-test 支持哪些平台？
vs-test 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 vs-test？
由 ValueScan-ai（@valuescan-io）开发并维护，当前版本 v1.0.1。
推荐 Skills