ClawHub

OptionsHawk

v0.0.1

Options flow analysis, unusual activity detection, and options strategy evaluation for equities and ETFs

⭐ 0· 433·0 current·0 all-time
by@optionshawk24
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description (options flow, unusual-activity, strategy evaluation) matches the single required credential (OPTIONSHAWK_API_KEY) and the configuration options. There are no unrelated env vars, binaries, or config paths requested.
ℹ
Instruction Scope
SKILL.md instructs the agent to use an API key to authenticate requests for options flow and alerts; it does not ask the agent to read local files or other environment variables. The instructions are minimal and do not specify endpoints or data handling details (e.g., what exact endpoints are called, what user data is sent), which is not inherently malicious but leaves behavior somewhat underspecified.
✓
Install Mechanism
No install spec and no code files — instruction-only skill. This minimizes on-disk execution risk; nothing is downloaded or installed by the skill itself.
✓
Credentials
Only a single service API key is required (plus an optional alert threshold). That is proportional for a remote data-provider integration. No broad or unrelated secrets are requested.
✓
Persistence & Privilege
Flags show default behavior (always: false, agent-invocation allowed). The skill does not request permanent presence or system-wide configuration changes.
Assessment
This skill appears internally consistent for an options-flow data provider: it only asks for an OPTIONSHAWK_API_KEY and is instruction-only (no installers or code). Before installing, confirm who operates the OptionsHawk API (verify the vendor or documentation), and only provide an API key with the minimum necessary privileges. Treat the key like any secret: store it in a secure environment variable vault, avoid pasting it into chat, and be prepared to rotate/revoke it if you suspect misuse. Because SKILL.md is minimal and does not list exact endpoints, consider testing with a limited-scope or expendable API key and monitor outbound traffic and API usage to ensure the skill behaves as expected. If you need stronger assurance, ask the skill publisher for a homepage, API docs, and a privacy/data-retention policy before use.

Like a lobster shell, security has layers — review code before you run it.

latestvk970a80jfv4sp68tddy0nrndfx81n7et

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvOPTIONSHAWK_API_KEY
Primary envOPTIONSHAWK_API_KEY

Comments