Security audit
PriceTide
Security checks across malware telemetry and agentic risk
Overview
PriceTide's declared purpose (timing advice for Chinese e‑commerce) matches its instructions and artifacts; it requests no credentials, has no install downloads, and contains only a harmless publish helper script.
PriceTide appears internally consistent and low risk: it does not ask for credentials or install remote code. Before using, remember it needs you to supply product links, screenshots, or price details to work; do not paste private account credentials or payment data into the chat. The included publish script is for authors and only checks for local tools (node, clawhub) — it does not download code. If you need the skill to act on your accounts (set reminders, auto‑claim coupons, or place orders), avoid providing account tokens because the skill explicitly states those actions are out of scope and require user action.
VirusTotal
No VirusTotal findings
Static analysis
No suspicious patterns detected.