v1.0.0

Hourly Momentum Trader

ReviewClawScan verdict for this skill. Analyzed May 1, 2026, 5:55 AM.

Analysis

This instruction-only trading skill is not malware, but it should be reviewed because it directs real-money crypto/Polymarket betting without clear confirmation or loss limits.

GuidanceBefore installing, treat this as a financial-risk skill. Use it for analysis only unless you deliberately connect trading or wallet tools, require explicit approval for every bet or trade, set hard stake limits, and assume the signals can be wrong.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityMediumConfidenceHighStatusConcern

SKILL.md

# Bet when:
# - abs(momentum_score) >= 3
# - abs(edge) >= 0.10 (10%)
# - market is fresh (<30 min old)
# - USDC.e balance >= $5

The skill provides explicit criteria for placing live financial bets, but the artifact does not require explicit user approval, stake caps, dry-run behavior, or other controls before acting on those criteria.

User impactIf paired with trading, wallet, or browser tools, an agent could treat these instructions as permission to place bets or trades that may lose money.

RecommendationRequire explicit user confirmation before any trade or bet, define maximum stake and supported accounts/markets, default to analysis-only output, and clearly state the risk of loss.

Human-Agent Trust Exploitation

SeverityLowConfidenceHighStatusNote

SKILL.md

edge = our_prob - market_prob_up  # e.g. 0.80 - 0.35 = 45% edge!

Highest-EV Polymarket plays:
- Momentum score ≥+3 AND market DOWN >70% → **BET UP** (counter-consensus, 3-5x payout)

The strategy uses confident promotional language about edge and payout while not including uncertainty, validation limits, or loss warnings.

User impactUsers may over-trust the claimed edge or payout framing and underestimate the risk of losing funds.

RecommendationUse neutral probabilistic wording, include risk disclaimers, and make clear that signals are not guaranteed financial outcomes.