Stock TA Charts
ReviewAudited by ClawScan on May 10, 2026.
Overview
The charting purpose is mostly coherent, but the skill includes a hard-coded Telegram send target and depends on an unbundled local Python module.
Before installing or using this skill, verify that ~/clawd/crypto_charts.py is trusted and remove or replace the hard-coded Telegram target with your own confirmed recipient. Expect it to fetch public market data and write chart images under ~/clawd/charts.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A generated chart, and possibly evidence of the user's market-analysis request, could be sent to an unintended Telegram recipient.
The skill tells the agent to send a generated chart to a specific Telegram target ID without explaining whose account it is or requiring the user to choose the recipient.
message (Telegram, target="7887978276") [attach ~/clawd/charts/chart_btc.png]
Remove the hard-coded Telegram target, or require an explicit user-provided recipient and confirmation before sending any attachment.
The skill's behavior depends on whatever crypto_charts.py exists in the local ~/clawd directory, so the reviewed artifacts do not fully show what code will run.
The main workflow depends on a local helper module, but the provided file manifest contains only SKILL.md and _meta.json, with no install spec or crypto_charts.py source to review.
Generate professional technical analysis charts using the local `crypto_charts.py` module.
Only run this after inspecting or supplying the expected crypto_charts.py module from a trusted source, or have the skill package include the module and pinned dependencies.