Back to skill
Skillv1.0.0
ClawScan security
The Titan Scalper IDX · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 5, 2026, 5:24 PM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only IDX scalping advisor that asks users for Stockbit OHLC/volume/screenshots before analysis and does not request unrelated credentials or install software — its requirements and instructions align with its stated purpose.
- Guidance
- This skill appears coherent and self-contained, but remember: it cannot fetch live market data itself — you must provide accurate Stockbit OHLC/volume or screenshots for any signal. Do not share account credentials, private order IDs, or personally identifying information in screenshots. Treat outputs as technical analysis (not guaranteed trading advice): validate signals independently, paper-trade first, and confirm compliance with local regulations and your risk tolerance before acting on recommendations.
- Findings
[no_regex_findings] expected: The static scanner found no code or suspicious patterns; this is expected because the skill is instruction-only and contains only textual analysis guidance and reference docs.
Review Dimensions
- Purpose & Capability
- okName/description (IDX scalping/day-trading signals) align with the SKILL.md. The skill explicitly requires user-supplied Stockbit OHLC, volume, and screenshots for analysis and does not request unrelated environment variables, binaries, or services.
- Instruction Scope
- okRuntime instructions are narrowly scoped to technical chart/volume analysis (M5/M15) and risk management. The SKILL.md instructs the agent to ask users for data and does not direct the agent to read local files, access system credentials, or send data to external endpoints.
- Install Mechanism
- okNo install spec or code files that would be downloaded/executed. Instruction-only skill has minimal persistence and disk/write risk.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths — appropriate for an analysis-only advisor that relies on user-provided market snapshots.
- Persistence & Privilege
- okalways:false and normal user-invocable/autonomous settings. The skill does not request elevated or persistent privileges and does not modify other skills or system settings.