Macro Monitor

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent daily macro-data reporting skill with disclosed scheduled browsing and message delivery, and no evidence of hidden data theft or destructive behavior.

This skill appears safe for its stated purpose if you want an automated daily macroeconomic report. Before installing, confirm that you are comfortable with scheduled browser-based data collection, message pushes, and any optional edits to the local indicator reference file. Consider using a dedicated browser profile with no sensitive logins.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

If enabled, the skill may run automatically every day and send the user a macroeconomic report without a manual prompt each time.

Why it was flagged

The skill documents a daily scheduled agent turn at 10 PM. This is persistent autonomous activity, but it is clearly disclosed and matches the stated monitoring purpose.

Skill content
"expr": "0 22 * * *", "tz": "Asia/Singapore" ... "enabled": true
Recommendation

Install only if you want daily automatic reports, and confirm the cron configuration is managed and removable in your OpenClaw environment.

What this means

Incorrect or biased web-derived explanations could be saved and reused in future reports.

Why it was flagged

The skill may persist explanations found from web searches into its local indicator reference file, causing future reports to rely on that stored content.

Skill content
可选:更新知识库 ... 考虑将解释添加到 references/indicators.md 中,避免重复搜索
Recommendation

Review any additions to references/indicators.md, especially definitions gathered from news or search results, before relying on them long-term.

What this means

Public websites visited by the skill may be accessed using whatever session state exists in the selected browser profile.

Why it was flagged

The skill starts browser automation with a named profile. The artifacts do not show credential harvesting or account mutation, but a persistent browser profile can carry cookies or session state.

Skill content
browser action=start profile=openclaw
Recommendation

Use a clean or dedicated browser profile for this skill if you do not want it to reuse any logged-in sessions.