Back to skill
Skillv1.0.1
ClawScan security
MoltStreet SPY · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 13, 2026, 11:24 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is internally consistent: it only fetches public index analyses from moltstreet.com via curl, requests no credentials, and its behavior matches its description.
- Guidance
- This skill simply GETs public endpoints on moltstreet.com and needs curl; it does not request credentials. Before installing, verify you trust the moltstreet.com domain and the claimed repository (https://github.com/fredxyt/moltstreet) if you want source-code assurance. Remember outputs are AI-generated and explicitly labeled 'not financial advice' — do not provide secrets or private data to the skill, and treat its market signals as informational only. If you need stronger assurance, review the upstream code/repo or contact the site owner to confirm provenance.
Review Dimensions
- Purpose & Capability
- okName/description promise AI signals for SPY/QQQ/DIA/IWM and the manifest + SKILL.md show only GET endpoints on moltstreet.com for those tickers; required binary (curl) matches the described fetching behavior.
- Instruction Scope
- okRuntime instructions only call specific moltstreet.com GET endpoints and describe how to synthesize those responses. There are no instructions to read local files, environment variables, or unrelated system state, nor to send data to third parties beyond moltstreet.com.
- Install Mechanism
- okThis is an instruction-only skill with no install spec or additional packages. That minimizes on-disk risk; runtime network GETs are the only external interaction.
- Credentials
- okNo environment variables, credentials, or config paths are requested. The lack of secrets is proportional to a read-only public-API fetching skill.
- Persistence & Privilege
- okSkill does not request always:true and uses normal, user-invocable defaults. It does not modify other skills or agent-wide configuration in the provided materials.