coinank-openapi@1.0.3
CAUTION· static onlyPublisher claims: "Access CoinAnk crypto derivatives market data via API key or Agent Payments Protocol/x402 pay-per-call." Observed in sandbox: static analysis only — behavior not yet observed.
Coverage
Static only; nothing was run yet.The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.
Is [email protected] safe to install?
KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-12 and scored it 64/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Collapsed <details> block carrying instructions; Collapsed <details> block carrying instructions; Collapsed <details> block carrying instructions. Summary: static analysis only — behavior not yet observed.
Behavior trace
Queued for honeypot run · static analysis onlyt+CategoryObserved action
This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.
Static findings
HIGH
Collapsed <details> block carrying instructionsREADME.md:321 · Collapsed <details> block carrying instructions
AST01<summary><strong>2. ETF</strong> — 5 个接口 · API1</summary> <br /> #### `GET /api/etf/getUsBtcEtf` — 美国 BTC ETF 列表 **无需参数** #### `GET /api/etf/getUsEthEtf` — 美国 EFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.HIGH
Collapsed <details> block carrying instructionsREADME.md:296 · Collapsed <details> block carrying instructions
AST01<summary><strong>1. K 线</strong> — 1 个接口 · API1</summary> <br /> #### `GET /api/kline/lists` — K线行情数据 | 参数 | 必填 | 类型 | 说明 | 示例 | |------|------|------|------|--Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.HIGH
Collapsed <details> block carrying instructionsREADME.md:353 · Collapsed <details> block carrying instructions
AST01<summary><strong>3. HyperLiquid 鲸鱼</strong> — 2 个接口 · API2</summary> <br /> #### `GET /api/hyper/topPosition` — 鲸鱼持仓排行 | 参数 | 必填 | 类型 | 说明 | 示例 | |------|------Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.HIGH
Collapsed <details> block carrying instructionsREADME_EN.md:320 · Collapsed <details> block carrying instructions
AST01<summary><strong>2. ETF</strong> — 5 endpoints · API1</summary> <br /> #### `GET /api/etf/getUsBtcEtf` — US BTC ETF List **No parameters required** #### `GET /aFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.HIGH
Collapsed <details> block carrying instructionsREADME_EN.md:1060 · Collapsed <details> block carrying instructions
AST01<summary><strong>16. Order Flow</strong> — 1 endpoint · API3</summary> <br /> #### `GET /api/orderFlow/lists` — Order Flow Data | Param | Required | Type | DescFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.HIGH
Collapsed <details> block carrying instructionsREADME.md:1160 · Collapsed <details> block carrying instructions
AST01<summary><strong>18. RSI 选币器</strong> — 1 个接口 · API2</summary> <br /> #### `GET /api/rsiMap/list` — RSI 指标筛选 | 参数 | 必填 | 类型 | 说明 | 示例 | |------|------|------|--Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.HIGH
Collapsed <details> block carrying instructionsREADME_EN.md:632 · Collapsed <details> block carrying instructions
AST01<summary><strong>9. News & Flash</strong> — 2 endpoints · API2</summary> <br /> #### `GET /api/news/getNewsList` — News/Flash List | Param | Required | Type | DFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.HIGH
Collapsed <details> block carrying instructionsREADME_EN.md:1159 · Collapsed <details> block carrying instructions
AST01<summary><strong>18. RSI Screener</strong> — 1 endpoint · API2</summary> <br /> #### `GET /api/rsiMap/list` — RSI Indicator Screener | Param | Required | Type |Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.HIGH
Collapsed <details> block carrying instructionsREADME_EN.md:295 · Collapsed <details> block carrying instructions
AST01<summary><strong>1. K-Lines</strong> — 1 endpoint · API1</summary> <br /> #### `GET /api/kline/lists` — K-Line Market Data | Param | Required | Type | DescriptiFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.HIGH
Collapsed <details> block carrying instructionsREADME.md:381 · Collapsed <details> block carrying instructions
AST01<summary><strong>4. 净多头和净空头</strong> — 1 个接口 · API3</summary> <br /> #### `GET /api/netPositions/getNetPositions` — 净多头/净空头历史 | 参数 | 必填 | 类型 | 说明 | 示例 | |------Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.HIGH
Collapsed <details> block carrying instructionsREADME_EN.md:380 · Collapsed <details> block carrying instructions
AST01<summary><strong>4. Net Long & Short</strong> — 1 endpoint · API3</summary> <br /> #### `GET /api/netPositions/getNetPositions` — Net Long/Short History | ParamFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.HIGH
Collapsed <details> block carrying instructionsREADME.md:1061 · Collapsed <details> block carrying instructions
AST01<summary><strong>16. 订单流</strong> — 1 个接口 · API3</summary> <br /> #### `GET /api/orderFlow/lists` — 订单流数据 | 参数 | 必填 | 类型 | 说明 | 示例 | |------|------|------|-----Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.HIGH
Collapsed <details> block carrying instructionsREADME.md:1023 · Collapsed <details> block carrying instructions
AST01<summary><strong>15. 资金流</strong> — 2 个接口 · API3</summary> <br /> #### `GET /api/fund/fundReal` — 实时资金流 | 参数 | 必填 | 类型 | 说明 | 示例 | |------|------|------|------|Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.HIGH
Collapsed <details> block carrying instructionsREADME.md:633 · Collapsed <details> block carrying instructions
AST01<summary><strong>9. 新闻快讯</strong> — 2 个接口 · API2</summary> <br /> #### `GET /api/news/getNewsList` — 新闻/快讯列表 | 参数 | 必填 | 类型 | 说明 | 示例 | |------|------|------|--Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.HIGH
Collapsed <details> block carrying instructionsREADME_EN.md:352 · Collapsed <details> block carrying instructions
AST01<summary><strong>3. HyperLiquid Whales</strong> — 2 endpoints · API2</summary> <br /> #### `GET /api/hyper/topPosition` — Whale Position Rankings | Param | RequFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.Cost to the agent
Instructions loaded
≈4,375 tok
1 file · 25 in bundle
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.
What would make this Verified
16 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%- Unclaimed publisher≈ +8 on the totalClaim annata: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
- Hidden instructions≈ +6 on the totalRemove HTML comments, zero-width characters and white-on-white text that carry instructions. Everything the agent is meant to read should be visible to the person reading the file.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim annataPropose a patch to the maintainer