Funding Rate Scanner
Analysis
This appears to be a simple public Binance market-data scanner that does not request credentials or place trades, though its leveraged trading suggestions should be treated cautiously.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
const data = await fetch('https://fapi.binance.com/fapi/v1/premiumIndex');The script makes an outbound request to Binance's public Futures API. This is disclosed by the skill's Binance funding-rate purpose and does not involve credentials or account actions.
Annual(5x): 2071% ... Open long position on high negative rate coin ... High leverage = high risk
The skill presents leveraged return calculations and a trading strategy, while also including risk warnings. This is purpose-aligned but could be over-trusted by a user or downstream agent.
Required binaries (all must exist): none ... No install spec — this is an instruction-only skill.
The SKILL.md usage relies on `node scripts/...`, so the metadata under-declares the Node.js runtime requirement. There is no remote installer or dependency download, making this a minor transparency issue.