v1.0.0

Tradebot Ops

ReviewClawScan verdict for this skill. Analyzed May 1, 2026, 6:12 AM.

Analysis

The skill matches its trading-ops purpose, but it can direct an agent to stop and restart a live trading bot, so it needs review before use.

GuidanceInstall only if you are comfortable with an agent helping operate a live trading bot. Configure usage so the agent must ask before stopping, restarting, or clearing state, and limit it to specific local files, bot PIDs, and approved trading endpoints.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityMediumConfidenceHighStatusConcern

SKILL.md

UI endpoints: `/api/trading/*` ... If stale: stop bot PID (runtime or heartbeat pid) → apply+restart.

The skill tells the agent to use broad trading UI endpoints and stop/restart the bot process based on health checks, but it does not define explicit confirmation, endpoint limits, rollback criteria, or containment before affecting a live trading system.

User impactA mistaken stale-health determination could stop or relaunch a live trading bot and change whether automated trading continues.

RecommendationUse a confirmation-first workflow: report health status first, require explicit user approval before restart or clear-stale actions, restrict to known bot PIDs/endpoints, and verify open positions and risk state before enabling live operation.