Skip to content

[rootdata-crypto-plugin] rootdata-crypto-plugin v1.0.0#423

Open
CJZZWW wants to merge 3 commits intookx:mainfrom
CJZZWW:submit/rootdata-crypto-plugin
Open

[rootdata-crypto-plugin] rootdata-crypto-plugin v1.0.0#423
CJZZWW wants to merge 3 commits intookx:mainfrom
CJZZWW:submit/rootdata-crypto-plugin

Conversation

@CJZZWW
Copy link
Copy Markdown

@CJZZWW CJZZWW commented May 7, 2026

Plugin Submission

Plugin name:
Version:
Type:

Checklist

  • plugin-store lint passes locally with no errors
  • I have read the Development Guide
  • My plugin does NOT use reserved prefixes (okx-, official-, plugin-store-)
  • LICENSE file is included
  • SKILL.md has YAML frontmatter with name and description

What does this plugin do?

Which onchainos commands does it use?

Security Considerations

Testing

@CJZZWW
Copy link
Copy Markdown
Author

CJZZWW commented May 7, 2026

[rootdata-crypto-plugin] rootdata-crypto-plugin v1.0.0

@Noah3595
Copy link
Copy Markdown
Collaborator

Noah3595 commented May 7, 2026

Strategy Review: rootdata-crypto-plugin

PR: #423 [rootdata-crypto-plugin] rootdata-crypto-plugin v1.0.0
Author: @CJZZWW
Category: utility (Skill-only, Mode A)
Files scanned: 3 (plugin.yaml, .claude-plugin/plugin.json, SKILL.md)
Result: FAIL — 2 errors, 3 warnings

Note: this is a utility plugin (read-only data), so trading-strategy-specific rules (execution path, dependent_plugin, --strategy-id) do not apply. Reviewed against the general FOR-DEVELOPERS.md standards.


Errors (must fix)

  1. [required-file] Missing SUMMARY.md
    FOR-DEVELOPERS §"Writing SUMMARY.md": "Every plugin must include a SUMMARY.md file in the same directory as SKILL.md. CI lint will reject submissions without it (error E150)." The PR ships only plugin.yaml, plugin.json, and SKILL.md.

  2. [api_calls] Undeclared external API domain — api.rootdata.com
    plugin.yaml declares api_calls: [], but SKILL.md calls 7 endpoints under https://api.rootdata.com/open/okx/skill/... (init, ser_inv, id_map, get_item, get_fac, hot_index, job_changes). FOR-DEVELOPERS §10 "Absolute Red Lines" [new-plugin] test-rust-cli v1.0.0 — E2E verification #3: "Network calls to undeclared domains not listed in api_calls."

Warnings

  1. [license] Missing LICENSE file
    plugin.yaml declares license: MIT, but no LICENSE file exists. Common rejection reason [new-plugin] test-rust-cli v1.0.0 #6 / lint code E041.

  2. [skill-structure] SKILL.md lacks explicit ## Overview heading
    Required sections per FOR-DEVELOPERS §5: "Overview, Pre-flight, Commands, Error Handling, Security Notices." The opening paragraph functions as an overview but isn't headed; lint may flag it.

  3. [security-design] /init endpoint mints an anonymous API key with empty body
    POST /open/okx/skill/init with Body: {} issues an okxsk_* key to any caller. SKILL.md states the key is "anonymous, low-privilege" and read-only — likely by design — but human reviewer should confirm rate-limiting / abuse controls on the upstream endpoint.


Fix guidance

Fix 1 — add SUMMARY.md in the same directory as SKILL.md:

# rootdata-crypto-plugin

## Overview

RootData OKX Edition — a read-only Web3 data lookup skill covering crypto projects,
investors, funding rounds, trending projects, and personnel job changes.

Core operations:

- Search projects, VCs, and people by keyword
- Look up project details, investors, funding history
- Track trending projects (1-day / 7-day windows)
- Monitor crypto industry hires and departures

Tags: `crypto` `web3` `research` `funding` `rootdata`

## Prerequisites

- No IP/region restrictions (public data API)
- `OKX_ROOTDATA_SKILL_KEY` environment variable (auto-provisioned via /init on first run)
- Internet access to api.rootdata.com
- Rate limit: 200 req/min per key

## Quick Start

1. **First-time setup**: ask the agent anything that uses RootData. If
   `OKX_ROOTDATA_SKILL_KEY` is missing, the skill calls `/init` to mint a key and
   stores it as an env var.
2. **Search**: e.g., "find Uniswap on RootData" → returns entity ID.
3. **Detail lookup**: pass the ID to project/funding endpoints for full data.
4. **Trending / job changes**: ask "what's hot today" or "who joined which crypto
   project this week".

Fix 2 — declare the API domain in plugin.yaml:

api_calls:
  - "api.rootdata.com"

Fix 3 — add LICENSE file with MIT text matching the declared license.

Fix 4 — add explicit ## Overview heading at the top of SKILL.md body content.


Automated strategy review by OKX Plugin Store CI

@mig-pre
Copy link
Copy Markdown
Collaborator

mig-pre commented May 8, 2026

rootdata-crypto-plugin

Please remove the first line of SUMMARY.md

GeoGu360 pushed a commit to GeoGu360/plugin-store that referenced this pull request May 8, 2026
RootData OKX Edition - read-only Web3 data lookup skill covering crypto
projects, investors, funding rounds, trending projects, and personnel
job changes. OKX-dedicated namespace with isolated API key.

Source: ported from okx#423 (CJZZWW/plugin-store).
ASCII-normalized (em-dash, arrow, not-equal) for CI lint compatibility.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@Noah3595
Copy link
Copy Markdown
Collaborator

Noah3595 commented May 8, 2026

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants