mov-toa
PassAudited by ClawScan on May 1, 2026.
Overview
This instruction-only skill coherently queries a disclosed crypto-news API, with minor notes about external provider provenance and sending search terms to that service.
This appears safe to install as a read-only crypto news helper. Before using it, remember that queries go to an external Railway-hosted API with limited public provenance, so avoid entering confidential trading strategies or private business information.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
You have less ability to independently verify who runs the API or how the service may change over time.
The skill relies on a remote hosted service, but the registry does not provide a source repository or homepage for users to verify the operator or implementation.
Source: unknown Homepage: none
Treat the provider as unverified unless you can validate it separately, especially before relying on it for trading decisions.
Normal crypto news searches are appropriate, but private trading strategies or sensitive keywords could be visible to the service operator if included in queries.
The documented workflow sends search terms and filters to an external API. This is purpose-aligned for a news search skill, but users should recognize that their queries leave the local agent.
Base URL: `https://web-production-666f44.up.railway.app` ... `-d '{"q": "bitcoin ETF", "limit": 10, "page": 1}'`Use non-sensitive search terms and avoid sending confidential trading or business information to the API.