Crypto Prices
PassAudited by ClawScan on May 1, 2026.
Overview
This is a narrowly scoped price lookup skill, but it relies on a local Python helper that is not included, so users should verify that file before using it.
This skill appears benign for price lookups. Before installing, make sure the referenced `~/clawd/crypto_prices.py` file is present and trustworthy, because the skill relies on that local Python module for its actual behavior.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the local `crypto_prices.py` file is missing, outdated, or replaced with unsafe code, the skill may fail or run code the user did not intend.
The skill's core behavior depends on a local helper module, while the provided package contains only SKILL.md and _meta.json and has no install spec. This is purpose-aligned but leaves the helper's provenance outside the reviewed artifacts.
Fetch live cryptocurrency and commodity prices using the local `crypto_prices.py` module.
Before using the skill, confirm that `~/clawd/crypto_prices.py` exists, comes from a trusted source, and only performs the expected price-provider lookups.
The agent may invoke local Python for price questions, so the safety of the local module matters.
The instructions tell the agent to run a local Python command. That is expected for a price-fetching helper, but it means the skill can execute local code in the user's environment.
cd ~/clawd && python3 -c " from crypto_prices import fetch_live_price, format_price_text
Use this only with a reviewed local module and keep invocation limited to user-requested price lookups.
