Back to skill
Skillv1.0.0
ClawScan security
Trading Knowledge · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 5, 2026, 10:22 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill's code, instructions, and requirements are consistent with a read-only trading knowledge reference and do not request extra permissions or perform unexpected actions.
- Guidance
- This skill appears to be a straightforward, read-only trading reference. It does not request credentials or perform network activity. Before relying on it for real trading decisions, remember: it's educational content (not personalized financial advice), verify any strategy against independent sources or backtests, and confirm you trust the author/version. If you need automated trading or account access, that would require additional, explicit credentials and should be evaluated separately.
Review Dimensions
- Purpose & Capability
- okSkill name/description match the provided SKILL.md content and the index.js data object. There are no unrelated environment variables, binaries, or install actions requested — the footprint is limited to a local knowledge object and simple getters.
- Instruction Scope
- okSKILL.md is purely educational guidance about trading concepts and chart patterns. It does not instruct the agent to read files, access system state, call external endpoints, or transmit data elsewhere.
- Install Mechanism
- okNo install specification; the package contains a small index.js and package.json with no dependencies. Nothing is downloaded or extracted from external URLs.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths. The content and code do not require secrets or external service access.
- Persistence & Privilege
- okalways is false and the skill does not request elevated or persistent privileges, nor does it modify other skills or system-wide configuration.