Upbit

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill coherently fetches public Upbit cryptocurrency price data and does not request credentials, persistence, or account-changing access.

This looks safe for checking public Upbit KRW prices. Be aware that each lookup may send the requested coin market code to Upbit, and the skill should not be used as financial advice or for private data handling.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

When used, the agent may contact Upbit and disclose the requested market symbol to that service.

Why it was flagged

The skill instructs the agent to make an external HTTP request to Upbit's public API; this is expected for live price lookup and does not show credential use or account mutation.

Skill content
curl -s "https://api.upbit.com/v1/ticker?markets=KRW-BTC"
Recommendation

Use the skill for public price lookups only, and avoid putting private or unrelated information into market-code requests.