Market Snapshot
PassAudited by ClawScan on May 1, 2026.
Overview
This skill is a straightforward market-data lookup that sends token queries to a disclosed hosted API and does not request credentials, wallet access, installs, or local file access.
This appears safe for looking up public token market data. Before installing, note that queries are sent to app.vecstack.com, so keep requests limited to token identifiers or symbols rather than private information.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Token names, symbols, or mint addresses requested by the user may be sent to the hosted Vecstack endpoint.
The skill directs the agent to call a hosted endpoint with user-provided token queries. This is disclosed and purpose-aligned for fetching market data, but it is still an external data flow users should notice.
Prefer the `web_fetch` tool for the endpoint... `https://app.vecstack.com/api/skills/market-snapshot?q=<CSV_TOKENS>&source=openclaw`
Use it for public market-data lookups; avoid including unrelated private or sensitive information in token queries.