技能详情(站内镜像,无评论)
许可证:MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本:v2.1.2
统计:⭐ 0 · 504 · 1 current installs · 1 all-time installs
⭐ 0
安装量(当前) 1
🛡 VirusTotal :可疑 · OpenClaw :可疑
Package:abuzerasr/asrai-x402
安全扫描(ClawHub)
- VirusTotal :可疑
- OpenClaw :可疑
OpenClaw 评估
The skill's stated purpose (crypto analysis) matches the tooling it calls, but it asks you to provide a full wallet private key and even instructs embedding that key in URLs — a high-risk pattern that is not proportionate and could expose your funds.
目的
Asrai is a crypto analysis tool that charges per call on-chain; requesting a wallet key to sign payments can be explained by that design. However, asking for a raw private key (ASRAI_PRIVATE_KEY) in the environment is unusually high privilege for a question/analysis tool — safer alternatives (API key, payment-relay, or an on-device signer/hardware wallet) would be expected.
说明范围
Runtime instructions tell the agent/user to store the raw private key in ~/.env and to use npx to call asrai-mcp (which will read that key). The README even documents streaming endpoints with the private key embedded in the URL (e.g., https://mcp.asrai.me/mcp?key=0x<your_private_key>), which would transmit the full private key to a remote server — this goes beyond legitimate analysis and creates direct exfiltration risk.
安装机制
The skill is instruction-only (no local install), but it repeatedly instructs using npx -p asrai-mcp (downloads code from npm at runtime) and offers git clone of a GitHub repo. Downloading and running an external npm package is a moderate risk and should be audited before use; the skill itself does not ship code but depends on external packages/domains (npm, x402.asrai.me, mcp.asrai.me).
证书
Only a single env var is requested (ASRAI_PRIVATE_KEY) — that seems minimal on paper but is disproportionate in practice because it is a full wallet private key granting complete control over funds. The instructions also recommend storing it in plaintext (~/.env) and passing it via query string to remote services, both unsafe practices.
持久
always:false (normal). The skill recommends adding an MCP server entry so the agent can run asrai-mcp; that config could cause the agent to invoke an external process that reads env files. This is not an inherent platform privilege escalation, but it does create a persistent pathway for the external tool to access the private key whenever the agent runs.
安装(复制给龙虾 AI)
将下方整段复制到龙虾中文库对话中,由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库(龙虾 AI)执行:为本机安装 OpenClaw 技能「Asrai Crypto Analysis (x402)」。简介:Crypto market analysis using Asrai API. Covers technical analysis, screeners, s…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装:https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/abuzerasr/asrai-x402/SKILL.md
(来源:yingzhi8.cn 技能库)
SKILL.md
---
name: asrai-x402
description: Crypto market analysis using Asrai API. Covers technical analysis, screeners, sentiment, forecasting, smart money, Elliott Wave, cashflow, DEX data, and AI-powered insights. Each API call costs $0.005 USDC from your own wallet on Base mainnet via x402.
license: MIT
metadata: {"openclaw":{"emoji":"📈","requires":{"env":["ASRAI_PRIVATE_KEY"]}},"clawdbot":{"emoji":"📈","requires":{"env":["ASRAI_PRIVATE_KEY"]}}}
---
# Asrai — Crypto Analysis via x402
Use Asrai tools when the user asks about crypto prices, market analysis, trading signals, sentiment, or investment advice.
## When to use
- Crypto price / chart / technical analysis → use asrai tools
- Market sentiment, CBBI, fear/greed → use asrai tools
- "What should I buy?" / buy opportunities / entry points → use `trade_signals` + `portfolio`
- Full market overview / morning report → use `market_overview`
- Elliott Wave, smart money, order blocks → use asrai tools
- DEX data, low-cap tokens → use asrai tools
- General knowledge you already know well → answer directly (costs $0.005 per call)
## Tool selection guide
| User asks... | Primary tool | Supporting tools |
|---|---|---|
| "what to buy?" / "buy opportunities" / "entry points" | `trade_signals` | `portfolio`, `sentiment` |
| "market overview" / "morning report" / "full brief" | `market_overview` | — |
| "what's trending?" / "hot coins" | `trending` | `gainers_losers` |
| "BTC analysis" / chart / signals | `technical_analysis` | `smart_money`, `elliott_wave` |
| "price prediction" / "forecast" | `forecast` | `technical_analysis` |
| "market sentiment" / "fear greed" / CBBI | `sentiment` | `dominance`, `macro` |
| "ATH" / "all-time high" coins | `ath_tracker` | `trade_signals` |
| "volume spikes" / unusual volume | `volume_spikes` | `high_volume_low_cap` |
| "find coins" / screener criteria | `screener` | `top_bottom` |
| "cashflow" / capital flow | `cashflow` | `sentiment` |
| "unlocked coins" / vesting pressure | `late_unlocked_coins` | — |
| "low cap gems" / DEX / chain tokens | `chain_tokens` | `dexscreener`, `high_volume_low_cap` |
| "portfolio" / "Abu's picks" | `portfolio` | `coin_info` |
**Important:** For buy opportunity questions ALWAYS call `trade_signals` — it combines trending movers, bounces, SAR & MACD entries, RSI, and Galaxy Score in one call.
## Install
```bash
npx -y -p asrai-mcp install-skill
```
Auto-detects OpenClaw, Cursor, Cline, and other agents. Then set your key:
```
ASRAI_PRIVATE_KEY=0x<your_private_key> # add to ~/.env
```
For MCP agents (Cursor, Cline, Claude Desktop) also add to config:
```json
{
"mcpServers": {
"asrai": { "command": "npx", "args": ["-y", "asrai-mcp"] }
}
}
```
## How to call
### If asrai MCP tools are available (Cursor, Cline, Claude Desktop)
Call the appropriate MCP tool directly:
```
technical_analysis(symbol, timeframe)
sentiment()
forecast(symbol)
market_overview()
ask_ai(question)
...
```
### If no MCP tool — use bash (OpenClaw and other agents)
Use the same tool names via bash:
```bash
npx -y -p asrai-mcp asrai <tool> [args...]
```
Examples:
```bash
npx -y -p asrai-mcp asrai ask_ai "What is the outlook for BTC today?"
npx -y -p asrai-mcp asrai technical_analysis BTC 4h
npx -y -p asrai-mcp asrai sentiment
npx -y -p asrai-mcp asrai forecast ETH
npx -y -p asrai-mcp asrai market_overview
npx -y -p asrai-mcp asrai coin_info SOL
npx -y -p asrai-mcp asrai portfolio
npx -y -p asrai-mcp asrai indicator_guide ALSAT
```
Requires `ASRAI_PRIVATE_KEY` set in `~/.env` or environment. Payment is signed automatically.
## MCP tools
| Tool | What it does | Cost |
|---|---|---|
| `market_overview` | Full brief: trending, gainers/losers, RSI, screeners, sentiment, cashflow — use for complete reports only | $0.095 (19 calls) |
| `trending` | Currently trending coins | $0.005 |
| `gainers_losers` | Top gainers and losers | $0.005 |
| `top_bottom` | RSI extremes, top/bottom signals, bounce/dip candidates | $0.015 (3 calls) |
| `volume_spikes` | Coins with unusually high volume | $0.005 |
| `high_volume_low_cap` | Low market cap coins with high volume | $0.005 |
| `ath_tracker` | Coins near or at all-time high | $0.005 |
| `dominance` | BTC & altcoin dominance signals | $0.01 (2 calls) |
| `macro` | S&P 500 & Nasdaq signals — global market context | $0.01 (2 calls) |
| `sentiment` | CBBI, CMC sentiment, AI insights, channel news, Galaxy Score, social dominance | $0.03 (6 calls) |
| `late_unlocked_coins` | Post-vesting coins with low remaining selling pressure | $0.005 |
| `trade_signals` | Trade setups: trending movers, bounces, SAR & MACD entries, RSI, Galaxy Score, today's indicator signals | $0.04 (8 calls) |
| `technical_analysis(symbol, timeframe)` | Signals, ALSAT, SuperALSAT, PSAR, MACD-DEMA, AlphaTrend, TD, SMC, S/R, Elliott Wave, Ichimoku | $0.06 (12 calls) |
| `forecast(symbol)` | AI 3-7 day price prediction | $0.005 |
| `screener(type)` | Find coins by criteria (ichimoku-trend, rsi, vwap, volume, bounce-dip...) | $0.005 |
| `smart_money(symbol, timeframe)` | Order blocks, fair value gaps, support/resistance | $0.01 (2 calls) |
| `elliott_wave(symbol, timeframe)` | Elliott Wave analysis | $0.005 |
| `ichimoku(symbol, timeframe)` | Ichimoku cloud analysis | $0.005 |
| `cashflow(mode, symbol)` | Capital flow data | $0.005 |
| `coin_info(symbol)` | Stats, price, tags, CMC AI + auto DEX data | $0.025–$0.03 (5–6 calls) |
| `dexscreener(contract)` | DEX trading data | $0.005 |
| `chain_tokens(chain, max_mcap)` | Low-cap tokens on a specific chain | $0.005 |
| `portfolio` | Abu's curated model portfolio — investment reference | $0.005 |
| `ask_ai(question)` | AI analyst freeform answer | $0.01 |
| `indicator_guide(name)` | Reference guide for Asrai-specific indicators | FREE |
## Output rules
🎨 Output Style — Human-Friendly Format
Non-negotiables
• Use emoji section headers (🌡️ 🚀 📊 😬 ✅)
• Keep it easy to scan: short lines + whitespace
• Do not mention tools/endpoints in user-facing output
• Avoid low-liquidity noise: prefer repeated appearance across lists, meaningful volume, and/or clear catalyst
• Write like an experienced trader explaining to a friend — conversational, confident, direct
• Think like both a trader AND a long-term investor. Default to investor mode. Switch to trader mode only when user asks for entries
• End with 1 clear action bias: accumulate / wait / avoid — and why
## Cost
$0.005 USDC per call (most tools), $0.01 for `ask_ai`, FREE for `indicator_guide`. Signed from the user's own wallet on Base mainnet. Tell the user if they ask.