Back to skill
Skillv1.0.0
ClawScan security
TradingView Strategy Settings · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignFeb 23, 2026, 1:25 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill's instructions, requirements, and scope align with its stated purpose of automating TradingView strategy settings via a managed browser; nothing requested or described is disproportionate or unrelated.
- Guidance
- This skill appears coherent, but remember it automates your browser and can change live trading strategy parameters: (1) Only install if you trust the agent and the BrowserTool's permissions to access your tabs. (2) Test on a non-live or demo chart first to ensure the mappings and UI selectors work with your TradingView language/settings. (3) Require explicit user confirmation for ambiguous parameter mappings before applying changes. (4) If you want to avoid autonomous changes, keep autonomous model invocation disabled or only invoke this skill manually. (5) The skill does not need any credentials; don’t provide API keys or account passwords to it.
Review Dimensions
- Purpose & Capability
- okName/description match the instructions: the skill only automates UI interactions on an open TradingView chart to change strategy inputs and properties. It does not request unrelated credentials, binaries, or system resources.
- Instruction Scope
- okSKILL.md confines actions to browser automation (finding the TradingView tab, taking snapshots, clicking inputs, typing values, and verifying). It does not instruct reading local files, accessing other services, or transmitting data externally beyond interacting with the open page.
- Install Mechanism
- okInstruction-only skill with no install spec or third-party downloads. Nothing will be written to disk by an installer from this package.
- Credentials
- okNo environment variables, credentials, or config paths are requested. The declared prerequisites (a managed browser session and access to BrowserTool) are appropriate for browser automation.
- Persistence & Privilege
- okalways:false and no indications of modifying other skills or global agent configuration. The skill requires only normal, explicit invocation and runs within the agent's BrowserTool capabilities.