Crypto Price Pro

ReviewAudited by ClawScan on May 1, 2026.

Overview

Crypto Price Pro’s price, chart, report, and email features are coherent with its purpose, but users should configure the email credentials and scheduled delivery carefully.

Before installing, decide whether you need email delivery and scheduling. If you do, use an app-specific SMTP password, avoid storing secrets in shell startup files when possible, confirm the recipient address, and remove any cron job when you no longer want recurring reports.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If configured, the skill can send email using the user’s SMTP account when the weekly report script runs.

Why it was flagged

The weekly report script logs into SMTP using a password from the environment and sends email from the configured account.

Skill content
SMTP_PASSWORD = os.getenv('EMAIL_PASSWORD') ... server.login(sender, password); server.send_message(msg)
Recommendation

Use an app-specific SMTP authorization code rather than a main mailbox password, verify the recipient, and declare the EMAIL_* variables in metadata.

What this means

A configured cron job may continue sending reports after the original request unless the user removes it.

Why it was flagged

The skill documents an optional scheduled job that will keep running daily until removed.

Skill content
openclaw cron add --schedule "0 10 * * *" --command "python3 skills/crypto-price/scripts/crypto_weekly_report.py"
Recommendation

Only add the cron job if recurring emails are desired, and document how to list and remove the scheduled task.

What this means

Installing dependencies this way can affect the local Python environment and pulls the latest package version available at install time.

Why it was flagged

Chart generation depends on a manual, unpinned package install that modifies the user Python environment.

Skill content
pip3 install matplotlib --break-system-packages --user
Recommendation

Prefer a virtual environment or pinned dependency version, and install only from trusted package sources.