Crypto Market Data

AdvisoryAudited by Static analysis on May 8, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your AIsa API key may be used for API access, quota, billing, or account attribution when the skill is invoked.

Why it was flagged

The client reads an AIsa API key from the environment and sends it as a bearer token to the AIsa API. This is expected for the service, but it is still account/credential use.

Skill content
self.api_key = api_key or os.environ.get("AISA_API_KEY") ... "Authorization": f"Bearer {self.api_key}"
Recommendation

Use a dedicated, least-privilege API key if available, monitor usage, and revoke or rotate the key if you uninstall or stop using the skill.

What this means

Coin IDs, exchange IDs, contract addresses, and related market-data queries may be visible to the API provider.

Why it was flagged

The bundled script performs external HTTP requests to AIsa using user-supplied query parameters. This is aligned with the skill's market-data purpose, but it means crypto queries leave the local environment.

Skill content
BASE_URL = "https://api.aisa.one/apis/v1" ... urllib.request.urlopen(req, timeout=60)
Recommendation

Avoid sending information you consider private, such as sensitive portfolio strategy details, unless you are comfortable sharing those queries with the API provider.

What this means

The tool may be selected for some non-crypto finance questions where it cannot provide appropriate data.

Why it was flagged

The visible functionality is CoinGecko-backed cryptocurrency data, so mentioning stock analysis and dividend research could cause the agent to invoke the skill for unsupported financial tasks.

Skill content
Use when: the user needs market data, stock analysis, dividend research, or read-only financial data workflows.
Recommendation

Use this skill for cryptocurrency and CoinGecko-style market data; use a separate finance data source for stocks or dividends.