Cryptocurrency market data and price alert monitoring tool based on CCXT. Supports multiple exchanges, real-time price tracking, and configurable price/volat...
Security Analysis
high confidenceThe skill's code, documentation, and runtime instructions are consistent with a CCXT-based cryptocurrency market-data and alert tool; it does not request unrelated credentials or perform surprising actions.
The name/description (market data + alerts) matches the provided Python script and SKILL.md. The skill uses CCXT for public market data, supports multiple exchanges, and stores alerts locally. It does not request unrelated environment variables or binaries.
SKILL.md tells the agent to install ccxt and run the included script with expected commands (ticker, ohlcv, orderbook, watch, alert-*). The instructions and script only access exchange APIs via CCXT and a local config path (~/.config/crypto/alerts.json). There are no instructions to read unrelated files or to transmit data to unexpected remote endpoints.
There is no install spec (instruction-only) and dependencies are limited to CCXT (installed via pip). No arbitrary downloads, archive extraction, or third‑party installers are present.
The skill declares no required environment variables or credentials. The code does not read secrets from the environment. CCXT supports optional API keys for private actions, but this skill uses public endpoints by default; any use of API keys would be an explicit user action and is documented in references/exchanges.md.
The skill persists alerts in ~/.config/crypto/alerts.json (expected for an alerting tool). always is false and it does not modify other skills or system-wide agent settings. Autonomous invocation is allowed by default (platform behavior) but the skill's actions are scoped to user-invoked commands and local state.
Guidance
This skill appears to do what it says: fetch public market data via CCXT and store alerts locally in ~/.config/crypto/alerts.json. Before installing/run: 1) Install ccxt from PyPI (pip3 install ccxt --user) in a controlled Python environment (virtualenv) to avoid mixing system packages. 2) Understand it will make outbound requests to exchange APIs (internet access required) and may hit rate limits. 3) Do not store or provide API keys unless you intend to enable private/trading features; if you do, keep keys out of the alerts.json file and use secure storage. 4) Review the included script yourself if you need stronger assurance. Overall, the package is internally consistent and there are no obvious red flags.
Latest Release
v1.0.5
- Initial release of the crypto skill. - Provides real-time cryptocurrency price tracking and configurable alerts based on the CCXT library. - Supports multiple exchanges (default: Binance) with quick exchange switching. - Features include live ticker, historical K-line data, order book, and customizable price/volatility alerts. - Command-line usage with flexible options for data retrieval and alert management.
More by @AlphaFactor
Published by @AlphaFactor on ClawHub
