ChartClass

PassAudited by ClawScan on May 1, 2026.

Overview

ChartClass is a coherent instruction-only market chart analysis skill that requires a purpose-aligned API key for market data access.

This appears safe to install if you intend to use ChartClass for market chart analysis. Provide the CHARTCLASS_API_KEY only through the intended environment variable, treat it as a secret, and remember that the skill is for analysis rather than guaranteed investment advice.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI03: Identity and Privilege Abuse

What this means

Installing users must provide a ChartClass API key, so requests made through the skill may be associated with that ChartClass account or quota.

Why it was flagged

The skill requires an API key, which is a credential. Its use is clearly disclosed and aligned with market data and technical analysis requests.

Skill content

`CHARTCLASS_API_KEY` — API key for ChartClass. Used to authenticate requests for OHLCV price data, technical indicator values, and pattern scan results.

Recommendation

Use a dedicated or least-privileged API key if available, monitor usage, and avoid sharing the key outside the configured environment variable.