Charts
ReviewAudited by ClawScan on May 10, 2026.
Overview
The charting purpose is mostly coherent, but the skill also directs sending generated charts to a hardcoded Telegram recipient and relies on an unreviewed local Python module.
Before installing, verify the local crypto_charts.py module and remove or modify the Telegram command unless you intentionally want charts sent to that exact Telegram target after generation.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent could send charts from your environment to an unintended Telegram recipient or use your messaging capability in a way you did not request.
This instructs the agent to use an external messaging tool to send a generated file to a fixed Telegram recipient, without saying to ask the user first or verify the recipient.
After generating, send the chart image using Clawdbot's native `message` command: ``` message (Telegram, target="7887978276") [attach ~/clawd/charts/chart_btc.png] ```
Only send charts when the user explicitly asks, make the recipient user-configurable, and require confirmation before any Telegram message is sent.
The skill’s behavior depends on whatever local crypto_charts.py file exists in ~/clawd, which may differ from what the skill describes.
The reviewed package contains no crypto_charts.py source, so the actual code that fetches data, cleans files, and generates charts is outside the provided artifacts and was not covered by the static scan.
Uses the local `crypto_charts.py` module.
Review or provide the crypto_charts.py source before running these commands, and declare the local dependency and python3 requirement in the skill metadata.