📦 Crypto Signals Daily — 每日币圈信号
v1.0.0每日推送20组Binance交易对的技术分析信号,涵盖宏观趋势、情绪指数及3条精选交易思路,助您快速把握市场机会。
0· 540·0 当前·0 累计
下载技能包
最后更新
2026/2/26
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill's description and runtime instructions don't match: it promises automated trading signals but gives no details about where data comes from, what APIs are used, or whether it will execute trades. Before installing or enabling it: (1) ask the publisher for a full runtime plan—list of data sources/endpoints, whether Binance API access (and what scopes) is required, and how Reddit sentiment and Fear & Greed are computed; (2) never provide exchange API keys unless you understand and trust ...详细分析 ▾
⚠ 用途与能力
The skill claims to generate TA signals across 20 Binance pairs, macro regime, Fear & Greed index, Reddit sentiment, and trade ideas, but there are no declared data sources, API endpoints, or credentials (e.g., Binance API key) and no implementation details. That absence is inconsistent with the stated purpose: producing reliable signals typically requires explicit data feeds and parsing logic.
⚠ 指令范围
SKILL.md is extremely minimal and open-ended ('Use crypto-signals-daily to get started') with no concrete steps. This grants the agent broad discretion to fetch data from arbitrary endpoints, call other skills, or access system/network resources to assemble the briefing—actions that are not constrained or documented by the skill.
✓ 安装机制
Instruction-only skill with no install spec and no code files. Nothing is written to disk by the skill package itself, which lowers supply-chain risk.
ℹ 凭证需求
The skill requests no environment variables or credentials. That reduces direct credential-exfiltration risk, but is also unexpected given the Binance and Reddit data it promises; legitimate implementations would usually require API keys or explicit public endpoints. The lack of declared env/config raises an incoherence (either it relies on other unspecified skills/resources or it will fetch data from arbitrary public sources).
✓ 持久化与权限
No 'always: true' or other elevated persistence flags. The skill is user-invocable and allows autonomous invocation (platform default), which is normal, but combined with the vague instructions this increases the importance of knowing what external calls the agent may make.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/22
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install crypto-signals-daily
镜像加速npx clawhub@latest install crypto-signals-daily --registry https://cn.longxiaskill.com