Gold Price Report

• Verdict: Pass
• Analyzed: May 11, 2026, 6:13 AM
• Findings: 0
• Version: 1.1.1
• Hash: 0c693fd523a4ab386d1c48587bb85b573c727756f1cfaea135923f3427041064
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: gold-price-report Version: 1.1.1 The skill is designed to fetch and report real-time gold, silver, and precious metal prices. The Python script `scripts/fetch_gold_panels.py` retrieves data from a specific financial API (api-gold.aibuy.cloud) and formats it as Markdown or JSON. There are no signs of data exfiltration, malicious execution, or prompt injection.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI02: Tool Misuse and Exploitation

NoteHigh Confidence

What this means

Using the skill will send quote-code requests to the external pricing API; the artifacts do not show local personal data, credentials, or files being sent.

Why it was flagged

The skill contacts an external real-time quote service. This is purpose-aligned and the request is limited to fixed market quote codes, but users should know the skill depends on a third-party network service.

Skill content

API = "https://api-gold.aibuy.cloud/quoteCenter/realTime.htm"

Recommendation

Install only if you are comfortable with this external quote provider being contacted for price data, and treat the returned prices as third-party market information.