CatalystWatch

PassAudited by ClawScan on May 1, 2026.

Overview

CatalystWatch is a coherent finance data skill that uses a disclosed API key for market catalyst information, with no artifact evidence of hidden code, destructive actions, or credential misuse.

This skill appears safe to install if you intend to use CatalystWatch market data. Before using it, provide only a properly scoped CatalystWatch API key and remember that catalyst analysis can inform financial decisions but does not replace independent investment judgment.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill may use your CatalystWatch account or quota to retrieve financial event data.

Why it was flagged

The skill requires a provider API key, which is expected for its market-data purpose and is clearly disclosed, but it is still a credential that users should protect and scope appropriately.

Skill content
`CATALYSTWATCH_API_KEY` — API key for CatalystWatch. Used to authenticate requests for earnings calendars, FDA event dates, macro release schedules, and corporate action data.
Recommendation

Use a dedicated, least-privileged API key if available, avoid sharing the key in chats or logs, and revoke or rotate it if it is no longer needed.