← Back to Skills Marketplace
16181
Downloads
11
Stars
98
Active Installs
3
Versions
Install in OpenClaw
/install crypto-market-data
Description
No API KEY needed for free tier. Professional-grade cryptocurrency and stock market data integration for real-time prices, company profiles, and global analytics. Powered by Node.js with zero external dependencies.
Usage Guidance
Install only if you are comfortable sending requested symbols, coin IDs, currencies, and search terms to api.igent.net. Keep the skill directory private, avoid setting API_BASE_URL unless you trust the replacement service, and delete scripts/.token if you want to clear the cached provider session.
Capability Analysis
Type: OpenClaw Skill
Name: crypto-market-data
Version: 1.0.2
The skill bundle is classified as suspicious due to a critical vulnerability in `scripts/api_client.js`. The `BASE_URL` for API calls can be overridden by the `API_BASE_URL` environment variable. If an attacker can control the environment where this skill runs, they could redirect all API traffic, including the session token stored in `.token`, to an arbitrary malicious server, leading to potential data exfiltration and session hijacking. While the default `BASE_URL` points to a legitimate domain (`https://api.igent.net/api`), the flexibility to override it without explicit sanitization or restriction constitutes a significant security risk, even if not intentionally malicious within the skill's design.
Capability Assessment
Purpose & Capability
The scripts fetch crypto and stock prices, searches, profiles, charts, and market statistics through GET requests, matching the stated market-data purpose; no trading, account mutation, destructive behavior, or unrelated local data access was found.
Instruction Scope
The skill documentation gives normal command examples and authentication details, without prompt overrides, hidden autonomy, public posting, moderation, or broad local indexing instructions.
Install Mechanism
The package declares no dependencies, no install scripts, and no npm lifecycle hooks; it consists of Node.js scripts using standard libraries.
Credentials
Network access to the default market-data API is expected for the purpose. The API_BASE_URL environment override can redirect requests if the local environment is controlled, so users should not set it to untrusted services.
Persistence & Privilege
The client automatically stores a temporary provider token in scripts/.token for reuse, and SKILL.md discloses this behavior. The file is written with default filesystem permissions rather than an explicit restrictive mode, which is a hardening gap on shared systems.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install crypto-market-data - After installation, invoke the skill by name or use
/crypto-market-data - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
Major rewrite: Migration from Python to Node.js, and expansion to support stock market data.
- All Python scripts and dependencies removed; replaced by Node.js scripts using only standard libraries.
- Added stock market features: real-time stock quotes, company profiles, and stock ticker search tools.
- Improved and streamlined authentication: session token management now handled via JavaScript and local file storage.
- Updated documentation for new usage patterns, script names, syntax, and supported features.
- No external dependencies required—just Node.js out-of-the-box.
v1.0.1
- fix SSL certificate verification
v1.0.0
- Initial release of Crypto Market Data skill.
- Provides real-time and historical cryptocurrency data with no API key required for free tier.
- Includes scripts for prices, trending coins, top coins, search, detailed coin info, OHLC and historical charts, global stats, and public company treasury data.
- Automatic authentication and rate limiting handled internally.
- Supports agent integration and usage through the provided scripts.
Metadata
Frequently Asked Questions
What is Crypto Market Data Skill (No Key Required)?
No API KEY needed for free tier. Professional-grade cryptocurrency and stock market data integration for real-time prices, company profiles, and global analytics. Powered by Node.js with zero external dependencies. It is an AI Agent Skill for Claude Code / OpenClaw, with 16181 downloads so far.
How do I install Crypto Market Data Skill (No Key Required)?
Run "/install crypto-market-data" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Crypto Market Data Skill (No Key Required) free?
Yes, Crypto Market Data Skill (No Key Required) is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Crypto Market Data Skill (No Key Required) support?
Crypto Market Data Skill (No Key Required) is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Crypto Market Data Skill (No Key Required)?
It is built and maintained by Liam (@liam8); the current version is v1.0.2.
More Skills