Trading Research
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a coherent Binance market-research and trading-calculation skill; users should avoid giving it live trading credentials or executing trades without explicit review.
This skill is reasonable for crypto research, public market data, and position-size calculations. Expect network requests to Binance. Treat its outputs as research, not financial guarantees, and do not provide exchange API keys or approve live trades unless you have deliberately set strict permissions and reviewed the action.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill for market data can send requested symbols and market-data queries to Binance public API endpoints.
The script fetches data from Binance over the network. This is disclosed and central to the market-data purpose, but users should know the skill contacts Binance APIs.
BASE_URL = "https://data-api.binance.vision" ... request.urlopen(url, timeout=10)
Use it for market research as intended and review any generated commands before running them, especially if adapting them beyond public market-data queries.
If a user supplies Binance API keys or follows these examples for live trading, the agent could help access account data or place/cancel orders.
The reference documentation includes authenticated Binance account and trading endpoints, even though the metadata declares no required credentials and the provided scripts do not show credential use.
Signed endpoints require... API Key... Place New Order POST /api/v3/order ... Cancel All Open Orders
Do not provide live Binance API keys unless you intentionally want that workflow; prefer testnet or read-only/scoped keys, disable withdrawals, and require explicit confirmation before any live order.
Users have less external information to verify who maintains the skill or where the code originated.
The skill has limited provenance information. No install-time commands or third-party package installs are shown, so this is a provenance notice rather than a material concern.
Source: unknown; Homepage: none
Review the included scripts before installation and prefer updates from a trusted publisher or repository when available.