crypto briefing

PassAudited by ClawScan on May 10, 2026.

Overview

This skill appears to perform read-only crypto market research using public websites and APIs, with no evidence of credential theft, persistence, destructive actions, or hidden exfiltration.

This looks like a benign market-briefing skill, but it will browse several third-party crypto sites and may use a browser profile. Treat its market predictions as informational only, not investment advice.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running the skill may contact CoinMarketCap and five crypto news sites and use their page contents in the generated briefing.

Why it was flagged

The skill requires the agent to use browser tooling against multiple named external websites. This is read-only and aligned with a market briefing skill, but it is still external tool use the user should expect.

Skill content
Use browser tool with `profile=openclaw`. Visit **EACH** site and extract headlines from last 12 hours.
Recommendation

Use the skill when live web research is acceptable; if you want fewer sources or no browsing, say so explicitly.

What this means

If that browser profile has existing state, visited websites may receive normal browser identifiers or cookies.

Why it was flagged

A named browser profile could carry ordinary browser state such as cookies, although the artifacts only direct visits to public news and market-data pages and do not request credentials or logins.

Skill content
Use browser tool with `profile=openclaw`.
Recommendation

Prefer an isolated browser profile for public research if you do not want existing browser state used.

What this means

If the helper script is used, some price or sentiment data may come from CoinGecko and Alternative.me rather than only from CoinMarketCap.

Why it was flagged

The included helper script makes public network requests using Python standard library code. It is purpose-aligned, but its API sources differ from the CoinMarketCap-focused workflow described in SKILL.md.

Skill content
price_url = f"https://api.coingecko.com/api/v3/simple/price?..." ... fng_url = "https://api.alternative.me/fng/?limit=1"
Recommendation

Review the cited data sources before relying on the report, especially for financial decisions.