Funding Rate Scanner
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a simple public Binance market-data scanner that does not request credentials or place trades, though its leveraged trading suggestions should be treated cautiously.
Before installing, know that this runs Node.js scripts that call Binance public endpoints and print funding-rate analysis. It does not need an API key or place trades, but leveraged crypto trading is high-risk, so independently verify the data and do not let another tool execute trades without explicit approval.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Running the skill contacts Binance and uses returned market data to produce opportunities; it does not trade or access an exchange account.
The script makes an outbound request to Binance's public Futures API. This is disclosed by the skill's Binance funding-rate purpose and does not involve credentials or account actions.
const data = await fetch('https://fapi.binance.com/fapi/v1/premiumIndex');Use it only if you are comfortable with external market-data requests, and verify results before acting on them.
A user could make risky leveraged trading decisions if they treat the output as guaranteed arbitrage or financial advice.
The skill presents leveraged return calculations and a trading strategy, while also including risk warnings. This is purpose-aligned but could be over-trusted by a user or downstream agent.
Annual(5x): 2071% ... Open long position on high negative rate coin ... High leverage = high risk
Treat the output as informational market data. Require explicit human review before any separate tool or exchange account is used to trade.
The skill may not run unless Node.js is available, despite the metadata saying no binaries are required.
The SKILL.md usage relies on `node scripts/...`, so the metadata under-declares the Node.js runtime requirement. There is no remote installer or dependency download, making this a minor transparency issue.
Required binaries (all must exist): none ... No install spec — this is an instruction-only skill.
Confirm Node.js is installed before use and prefer artifacts whose metadata accurately declares runtime requirements.