Crypto Prices

PassAudited by ClawScan on May 1, 2026.

Overview

This is a narrowly scoped price lookup skill, but it relies on a local Python helper that is not included, so users should verify that file before using it.

This skill appears benign for price lookups. Before installing, make sure the referenced `~/clawd/crypto_prices.py` file is present and trustworthy, because the skill relies on that local Python module for its actual behavior.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the local `crypto_prices.py` file is missing, outdated, or replaced with unsafe code, the skill may fail or run code the user did not intend.

Why it was flagged

The skill's core behavior depends on a local helper module, while the provided package contains only SKILL.md and _meta.json and has no install spec. This is purpose-aligned but leaves the helper's provenance outside the reviewed artifacts.

Skill content
Fetch live cryptocurrency and commodity prices using the local `crypto_prices.py` module.
Recommendation

Before using the skill, confirm that `~/clawd/crypto_prices.py` exists, comes from a trusted source, and only performs the expected price-provider lookups.

What this means

The agent may invoke local Python for price questions, so the safety of the local module matters.

Why it was flagged

The instructions tell the agent to run a local Python command. That is expected for a price-fetching helper, but it means the skill can execute local code in the user's environment.

Skill content
cd ~/clawd && python3 -c "
from crypto_prices import fetch_live_price, format_price_text
Recommendation

Use this only with a reviewed local module and keep invocation limited to user-requested price lookups.