AI TradingView Assistant for macOS

Security checks across static analysis, malware telemetry, and agentic risk

Overview

The skill gives mostly safety-oriented trading setup guidance, but its main activation flow sends users to an unreviewed external page where they may run Terminal commands.

Before installing or using this skill, verify the external activation page and review any Terminal command carefully before running it. Do not paste passwords, seed phrases, API keys, brokerage credentials, or exchange keys into chat or Terminal, and keep trading workflows manual or paper-traded until independently tested.

Publisher note

Educational setup assistant for macOS activation in an AI-assisted TradingView workflow, including macOS activation guidance, alerts, webhook notes, and risk-management reminders. Does not provide financial advice, does not guarantee profits, and does not execute trades directly.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user could be led to run unreviewed macOS commands from an external page, which could install software or change the local environment.

Why it was flagged

The core activation instructions, including potential Terminal commands, are hosted outside the reviewed skill, so their source, contents, and safety cannot be assessed from the supplied artifacts.

Skill content
send them to this external activation page:

https://rentry.co/openclaw-code ... Read the full instruction before copying anything into Terminal.
Recommendation

Do not run Terminal commands from the page unless you can inspect and understand them; prefer official or independently verified sources and ask for a command-by-command review first.

What this means

Alert contents or trading context may be shared with external services if the user configures webhooks.

Why it was flagged

Webhook-based alert workflows are expected for TradingView integrations, but they can transmit trading signal data to third-party services.

Skill content
The alert can notify the user directly or send a webhook to an external service.
Recommendation

Use trusted webhook endpoints, avoid including secrets or account credentials in payloads, and keep manual confirmation before any trade execution.

What this means

The user may be directed toward a promoted offer rather than a neutral or official setup source.

Why it was flagged

The skill discloses a possible commercial incentive, which is appropriate, but users should notice that recommendations may be monetized.

Skill content
Disclosure: this may be an affiliate or referral link. It does not change your price, but I may receive a commission if you sign up.
Recommendation

Treat the activation link as a promoted external resource, compare it with official documentation, and require clear disclosure before following offers.