coinvest518

Blockchain data and wallet intelligence via Alchemy API. Use this skill when the user asks about: wallet balances (ETH, tokens, NFTs), token prices, transaction history, gas fees, or simulating a transaction. Supports Ethereum, Base, Polygon, Arbitrum, and Optimism. API key is in ALCHEMY_API_KEY env var (confirmed working). No extra packages needed — uses requests only. Trigger phrases: "check my wallet", "check agent wallet", "what's the price of", "my token balances", "transaction history", "gas price", "simulate a tx", "how many NFTs". Agent wallet address: 0xAfF992D7921cB5c0b55613d14C2dA6B35f9e3439 (Base/ETH, key in AGENT_WALLET_PRIVATE_KEY env).

Coinbase and CDP (Coinbase Developer Platform) data. Use this skill for: top cryptocurrencies by market cap or volume, real-time crypto prices, Coinbase exchange trading pairs, portfolio data, CDP wallet operations, and market overview. No SDK needed — uses http_request only. Trigger phrases: "top coins", "top tokens", "crypto prices", "market cap", "coinbase prices", "CDP", "what's bitcoin at", "best performing crypto". CDP keys: CDP_API_KEY_ID, CDP_API_KEY_SECRET, CDP_NETWORK_ID (base-sepolia) in env.

Use Composio to interact with connected services — GitHub, Gmail, LinkedIn, Google Sheets, Twitter, Telegram, Google Drive, Google Docs, Google Analytics, Slack, Notion, Dropbox, Facebook, YouTube, Instagram, and 200+ more. All toolkits are PRE-AUTHENTICATED — execute actions directly, no OAuth needed.

Cross-platform analytics skill for the analyst sub-agent. Pulls engagement metrics, post performance, audience insights, and traffic data from Google Analytics, Twitter/X, LinkedIn, Instagram, Facebook, and YouTube via Composio. Use this to observe, measure, and learn from real business data. Trigger phrases: "analytics", "how did we do", "performance", "metrics", "engagement", "traffic", "insights", "what's working".

Interact with Google Sheets via Composio. Pre-authenticated — execute actions directly without OAuth. CRITICAL: Always use COMPOSIO_GOOGLEDRIVE_ACCOUNT_ID (not the sheets-native account).

Full control skill for Notion via Composio. Use when the owner asks to create, read, update, or organize anything in Notion — pages, databases, tables, rows, content blocks, images, or workspace structure. Workspace is "CoinVest INC's Space". Contains all action slugs, full parameter schemas, block types, and property formats. Trigger phrases: "create a page", "update Notion", "add to database", "redesign the page", "read notion page", "add a row", "organize notion", "make a table in notion".

Search the EXTERNAL internet for current prices, news, trends, public info, or anything not stored internally. Uses Tavily (primary) with HyperBrowser fallback for site-scoped scraping. Includes Extract, Crawl, and Map capabilities. NOT for internal system queries.

Inspect and clean up AstraDB collections. Use when the user asks to "list astra collections", "clean up astra", "delete a collection", "fix the 100 index limit", "free up astra space", or when an astra write fails with "Cannot have more than 100 indexes". AstraDB free tier caps each keyspace at 100 Storage Attached Indexes (~25 collections). This skill wraps scripts/astra_cleanup.py so the agent can diagnose and recover.

Plan yield farming and CAKE staking on PancakeSwap. Use when user says "farm on pancakeswap", "stake CAKE", "unstake CAKE", "stake LP", "unstake LP", "yield farming", "syrup pool", "pancakeswap farm", "earn CAKE", "farm APR", "harvest rewards", "deposit LP", "withdraw LP", or describes wanting to stake, unstake, or earn yield on PancakeSwap.

Plan liquidity provision on PancakeSwap. Use when user says "add liquidity on pancakeswap", "provide liquidity", "LP on pancakeswap", "farm pancakeswap", or describes wanting to deposit tokens into liquidity pools.

Plan and generate deep links for token swaps on PancakeSwap. Use when user says "swap on pancakeswap", "buy [token] with BNB", "pancakeswap swap", "I want to swap", or describes wanting to exchange tokens on PancakeSwap without writing code.

General AI Supply Chain Security Skill for any AI agent platform in 2026. Detects the exact class of attack that hit Vercel (and every similar real threat): over-privileged integrations, unpinned CI actions, unsigned webhooks, cross-boundary token forwarding, malicious MCP/OpenClaw skills, and OWASP ASI-09 risks. Runs live VirusTotal on every external dependency.

General AI Supply Chain Security Skill for any AI agent platform in 2026. Detects the exact class of attack that hit Vercel (and every similar real threat): over-privileged integrations, unpinned CI actions, unsigned webhooks, cross-boundary token forwarding, malicious MCP/OpenClaw skills, and OWASP ASI-09 risks. Runs live VirusTotal on every external dependency.

Security advisory feed with automated NVD CVE polling for OpenClaw-related vulnerabilities. Updated daily.

Discover, browse, filter, and pay for x402-compatible API endpoints and MCP tools from the x402 Bazaar — the autonomous discovery layer for agentic payments. Browse all available services, filter by price or type, inspect payment requirements, and call any discovered endpoint using USDC micropayments on Base with no API keys or account setup. Use when the agent needs to find a payable API service, check what x402 services exist for a given task (web scraping, AI inference, weather data, market data), pay for a single API call via x402, or list services under a given price threshold. Requires EVM_PRIVATE_KEY in .env (Base wallet with USDC) for paid calls. Discovery browsing requires no keys at all.

Commission-free US stock and crypto trading via the official Alpaca API. Executes market, limit, stop, bracket, and trailing-stop orders. Checks portfolio positions, account balance, buying power, and live quotes. Defaults to paper trading ($100k virtual cash, no real money) — live trading requires ALPACA_PAPER=false and user confirmation. Also runs technical indicator analysis (EMA, RSI, ATR, MACD, Bollinger Bands, VWAP) on fetched OHLCV bars. Use when user asks to buy or sell stocks or crypto, check portfolio, analyse a symbol technically, view open orders, cancel orders, or get a live quote. Requires ALPACA_API_KEY and ALPACA_SECRET_KEY.

Provides real-time market intelligence including Fear & Greed Index and top crypto/DeFi tokens.

Secure Gmail skill using Composio brokered OAuth — no raw tokens stored locally. Reads, searches, and drafts emails with least-privilege enforcement. Blocks send and delete at the Composio API gateway level, not just in code. Use when user asks to check inbox, find specific emails by sender or subject, summarize unread threads, or create reply drafts without sending. Requires COMPOSIO_API_KEY in .env and Gmail connected at app.composio.dev. Do NOT use for sending emails — use a send-confirmed skill with human approval instead.