A Stock Vcp

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user could pay for and rely on stock recommendations that may not be based on current market screening as described.

Why it was flagged

The included API code says the stock signals are simulated and hard-coded, while the skill description says it retrieves processed VCP breakout results from market data sources via a backend API.

Skill content
# VCP信号数据 (模拟)
VCP_SIGNALS = [
Recommendation

Treat the output as unverified sample data unless the publisher can prove the remote backend uses live or current market data and clearly labels simulated results.

What this means

Each use may cost 0.01 USDC, so repeated or unintended invocations could create small charges.

Why it was flagged

The skill is designed to make paid API calls through x402. This is disclosed and purpose-aligned, but it can still incur charges if invoked.

Skill content
每次调用:0.01 USDC
- 支付:x402 协议(Base 链 USDC)
Recommendation

Only enable the skill if you are comfortable with the per-call fee, and require explicit approval before paid calls.

What this means

The reviewed files may not reflect exactly what the remote service returns at runtime.

Why it was flagged

The skill relies on a remote backend endpoint; the local artifacts do not fully establish the hosted service's implementation or provenance.

Skill content
endpoint: "https://a-stock-signals.vercel.app/v"
Recommendation

Prefer publishers that document backend provenance, data sources, and change controls, especially for paid financial-signal services.