Skillv0.1.0

ClawScan security

Successful Trader · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 3, 2026, 5:05 AM

Verdict: Benign
Confidence: high
Model: gpt-5-mini
Summary: This is an instruction-only trading-advice skill whose requested resources and runtime instructions are internally consistent with its stated purpose and do not require elevated privileges or external credentials.
Guidance: This skill is a collection of trading best practices and is internally consistent, but remember: (1) it is advisory only—not a substitute for licensed financial advice; (2) it does not perform trades and does not request API keys, so if you plan to tie an agent to brokerage APIs, require explicit consent and review those integrations carefully; (3) watch for model hallucinations when the agent gives specific price forecasts or historically precise statements; and (4) verify the author/source and consider regulatory implications in your jurisdiction before acting on advice.

Purpose & Capability: okThe name and description claim trading guidance and the sole artifact (SKILL.md) contains only trading methodologies, plans, and checklists. There are no unrelated environment variables, binaries, or config paths requested that would be out of scope for a trading-advice skill.
Instruction Scope: noteSKILL.md is self-contained, high-level, and stays within the domain of strategy, risk management, technical/fundamental analysis, and journaling. It does not instruct the agent to read files, call external APIs, execute shell commands, or exfiltrate data. Note: the guidance could be used by an agent to produce actionable trade recommendations; users should be aware this is advisory content, not execution-safe code.
Install Mechanism: okThere is no install spec and no code files. Because this is instruction-only, nothing is downloaded or written to disk by the skill itself.
Credentials: okThe skill declares no required environment variables, credentials, or config paths. Requested access is proportionate (none) to the stated purpose.
Persistence & Privilege: okalways is false and model invocation is not disabled (normal defaults). The skill does not request permanent presence or special privileges and does not modify other skills or system-wide settings.