How do I install the Blackswan skill?

Run npx skillmds@latest add blackswanwtf/blackswan in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Blackswan safe to use?

SkillMD's automated safety review verdict for this skill is PASS. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: makes network calls. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Blackswan?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Blackswan free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Blackswan?

blackswanwtf (@blackswanwtf) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Blackswan by blackswanwtf — Agent Skill

Name: Blackswan
Rating: 4.2 (5 reviews)
Author: blackswanwtf

Blackswan

Real-time crypto risk intelligence; before and as things break. Two tools: Flare (15-min precursor detection, immediate alarms) and Core (60-min state synthesis, context assessment). Free access to the last analysis. No API key required. Upgrade to x402 for custom analysis.

blackswanwtf Updated Sep 10, 2026

File contents

BlackSwan Risk Intelligence

BlackSwan monitors crypto markets 24/7 and produces two risk assessments:

Flare — Precursor detection from a 15-minute signal window. Use for immediate, alarm-bell risk checks. Before the news breaks.
Core — State synthesis from a 60-minute signal window. Use for market context and risk assessment. As the news breaks.

When to use each tool

Question	Tool
"Is something happening right now?"	Flare
"What's the overall market risk environment?"	Core
"Should I be worried about sudden moves?"	Flare
"Give me a full risk briefing"	Both (Flare first, then Core)

Base URL

https://mcp.blackswan.wtf

Endpoints

GET /api/flare

Returns the latest Flare precursor detection assessment.

curl -s https://mcp.blackswan.wtf/api/flare

Response fields:

Field	Description
`agent`	Always `"flare"`
`data_age`	Human-readable age of the data (e.g. "12 minutes ago")
`status`	`"clear"` or `"alert"`
`severity`	`"none"`, `"low"`, `"medium"`, `"high"`, or `"critical"`
`checked_at`	ISO 8601 timestamp of the assessment
`assessment`	Natural language risk assessment
`signals`	Array of detected signals, each with `type`, `source`, and `detail`

GET /api/core

Returns the latest Core state synthesis assessment.

curl -s https://mcp.blackswan.wtf/api/core

Response fields:

Field	Description
`agent`	Always `"core"`
`data_age`	Human-readable age of the data (e.g. "1 hour ago")
`timestamp`	ISO 8601 timestamp of the assessment
`environment`	`"stable"`, `"elevated"`, `"stressed"`, or `"crisis"`
`assessment`	Natural language risk assessment
`key_factors`	Array of strings describing the main risk factors
`sources_used`	Array of data source names used in the assessment
`data_freshness`	Description of how fresh the underlying data is

Interpreting severity levels (Flare)

Severity	Meaning
`none`	No precursors detected, markets quiet
`low`	Minor signals, worth noting but not actionable
`medium`	Notable signals, warrants attention
`high`	Strong precursors detected, elevated risk of sudden moves
`critical`	Extreme signals, immediate risk of major market event

Interpreting environment levels (Core)

Environment	Meaning
`stable`	Normal market conditions, low systemic risk
`elevated`	Above-normal risk, some stress indicators present
`stressed`	Significant stress across multiple indicators
`crisis`	Severe market stress, active dislocation or contagion

Error handling

HTTP Status	Meaning
`200`	Success, response contains full assessment
`502`	Agent output failed validation — format may have changed
`503`	No recent agent runs — system may be starting up
`500`	Unexpected server error

On non-200 responses, the body is {"error": "..."} with a human-readable message.

Complete risk check pattern

To get a full picture, call both endpoints:

curl -s https://mcp.blackswan.wtf/api/flare
curl -s https://mcp.blackswan.wtf/api/core

Present Flare results first (immediate risks), then Core (broader context).

---name: blackswandescription: Real-time crypto risk intelligence; before and as things break. Two tools: Flare (15-min precursor detection, immediate alarms) and Core (60-min state synthesis, context assessment). Free access to the last analysis. No API key required. Upgrade to x402 for custom analysis.---# BlackSwan Risk IntelligenceBlackSwan monitors crypto markets 24/7 and produces two risk assessments:- **Flare** — Precursor detection from a 15-minute signal window. Use for immediate, alarm-bell risk checks. Before the news breaks.- **Core** — State synthesis from a 60-minute signal window. Use for market context and risk assessment. As the news breaks.## When to use each tool| Question | Tool ||----------|------|| "Is something happening right now?" | Flare || "What's the overall market risk environment?" | Core || "Should I be worried about sudden moves?" | Flare || "Give me a full risk briefing" | Both (Flare first, then Core) |## Base URL```https://mcp.blackswan.wtf```## Endpoints### GET /api/flareReturns the latest Flare precursor detection assessment.```bashcurl -s https://mcp.blackswan.wtf/api/flare```**Response fields:**| Field | Description ||-------|-------------|| `agent` | Always `"flare"` || `data_age` | Human-readable age of the data (e.g. "12 minutes ago") || `status` | `"clear"` or `"alert"` || `severity` | `"none"`, `"low"`, `"medium"`, `"high"`, or `"critical"` || `checked_at` | ISO 8601 timestamp of the assessment || `assessment` | Natural language risk assessment || `signals` | Array of detected signals, each with `type`, `source`, and `detail` |### GET /api/coreReturns the latest Core state synthesis assessment.```bashcurl -s https://mcp.blackswan.wtf/api/core```**Response fields:**| Field | Description ||-------|-------------|| `agent` | Always `"core"` || `data_age` | Human-readable age of the data (e.g. "1 hour ago") || `timestamp` | ISO 8601 timestamp of the assessment || `environment` | `"stable"`, `"elevated"`, `"stressed"`, or `"crisis"` || `assessment` | Natural language risk assessment || `key_factors` | Array of strings describing the main risk factors || `sources_used` | Array of data source names used in the assessment || `data_freshness` | Description of how fresh the underlying data is |## Interpreting severity levels (Flare)| Severity | Meaning ||----------|---------|| `none` | No precursors detected, markets quiet || `low` | Minor signals, worth noting but not actionable || `medium` | Notable signals, warrants attention || `high` | Strong precursors detected, elevated risk of sudden moves || `critical` | Extreme signals, immediate risk of major market event |## Interpreting environment levels (Core)| Environment | Meaning ||-------------|---------|| `stable` | Normal market conditions, low systemic risk || `elevated` | Above-normal risk, some stress indicators present || `stressed` | Significant stress across multiple indicators || `crisis` | Severe market stress, active dislocation or contagion |## Error handling| HTTP Status | Meaning ||-------------|---------|| `200` | Success, response contains full assessment || `502` | Agent output failed validation — format may have changed || `503` | No recent agent runs — system may be starting up || `500` | Unexpected server error |On non-200 responses, the body is `{"error": "..."}` with a human-readable message.## Complete risk check patternTo get a full picture, call both endpoints:```bashcurl -s https://mcp.blackswan.wtf/api/flarecurl -s https://mcp.blackswan.wtf/api/core```Present Flare results first (immediate risks), then Core (broader context).

Frequently asked questions