Price Tracker

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill does not show credential theft or exfiltration, but it presents random mock price data as real marketplace tracking, which could mislead buying or selling decisions.

Do not rely on this skill for real arbitrage or price-alert decisions unless it is clearly changed to use verified marketplace data. As provided, it is safest to treat it as a local demo/report generator and verify all prices directly on the relevant sites.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Users could mistake synthetic randomized prices for real Amazon, eBay, Walmart, or Best Buy prices and make poor purchasing or resale decisions.

Why it was flagged

The code explicitly uses mock product searches instead of real marketplace APIs, while the skill is described as monitoring actual prices across major e-commerce platforms.

Skill content
# Placeholder for actual platform integration ... def mock_search_product(keyword: str, platform: str) -> List[Dict]: """Mock search - replace with actual API calls in production."""
Recommendation

Treat this as a demo only unless the skill is updated to clearly disclose mock data or to use verified marketplace APIs with transparent data sources.

What this means

A user may rely on fabricated price history or trend predictions when timing purchases, resales, or arbitrage decisions.

Why it was flagged

Historical price reports and trend predictions are generated from random values, not retrieved historical market data.

Skill content
def generate_mock_history(base_price: float, days: int) -> List[Dict]: """Generate mock historical price data.""" ... volatility = random.uniform(-0.15, 0.15)
Recommendation

Require clear labeling that history is simulated, or replace the mock generator with a real, auditable price-history source before using it for decisions.

What this means

Users have less context for verifying who maintains the skill or whether it matches an upstream project.

Why it was flagged

The artifacts do not provide an external provenance source or homepage for the skill.

Skill content
Source: unknown; Homepage: none
Recommendation

Review the included scripts before use and prefer a version with clear source provenance and maintainer information.