Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Beta Market Radar
v1.0.0Real-time market scanning and alert system. Monitors SPX, major indices, VIX, and key crypto prices. Generates alerts when significant levels are crossed.
⭐ 0· 40·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The name and description promise 'real-time' scanning of indices, VIX, and crypto. The SKILL.md and radar.py, however, are a simulation (radar.py prints placeholders and explicitly says 'Simulated — connect Tiger API for real data'). It's coherent as a demo, but the advertised capability (real-time monitoring/alerts) is not implemented and requires external API integration that the skill does not request or perform.
Instruction Scope
SKILL.md only instructs running python3 radar.py with arguments. The instructions don't ask the agent to read unrelated files, environment variables, or send data to external endpoints. The scope is limited to running the included script.
Install Mechanism
There is no install spec (instruction-only plus a small script). Nothing is downloaded or written to disk beyond the included file, which is the lowest-risk install model.
Credentials
The skill requires only python3 and declares no environment variables, credentials, or config paths. That is proportionate for a local simulated script. Note: a true real-time implementation would reasonably require API keys for a market data provider; the skill does not request them.
Persistence & Privilege
always is false and the skill does not request persistent/system privileges or modify other skills. Autonomous invocation is allowed by default but not a specific concern here given the script's limited scope.
What to consider before installing
This package is effectively a demo stub, not a working real-time market radar. If you expected live data/alerts, understand that the included script only prints simulated placeholders and would need to be extended to call a market data API (the comment mentions 'Tiger API'). Before installing or running: 1) confirm with the author how to integrate a data provider and which credentials are required; 2) if you or others add API calls, only provide API keys you trust to code you reviewed—requests for unrelated secrets would be a red flag; 3) because the source/homepage is unknown, run the script in a sandbox or isolated environment first; 4) if you need true real-time monitoring, prefer a skill that documents which data provider it uses and explicitly declares required credentials and network endpoints.Like a lobster shell, security has layers — review code before you run it.
latestvk972qh0r6prnxyhsz9673n2xs983s956marketvk972qh0r6prnxyhsz9673n2xs983s956tradingvk972qh0r6prnxyhsz9673n2xs983s956
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📡 Clawdis
Binspython3