Aiprox Market Oracle

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is purpose-aligned, but it sends market queries to AIPROX using a paid spend token and its trading signals should be treated as informational.

Install only if you are comfortable sending market-query details to aiprox.dev and using an AIPROX spend token. Treat the generated trading signals as a research aid, not as guaranteed or personalized financial advice.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the token is exposed or misused, it could allow someone to consume paid API credits or act under the user's AIPROX authorization.

Why it was flagged

The skill requires a spend/payment token for the AIPROX API. This is disclosed and purpose-aligned, but it is still a credential-like secret that may authorize paid usage.

Skill content
| Env Read | AIPROX_SPEND_TOKEN | Authentication for paid API |
Recommendation

Use a dedicated, least-privilege spend token if available, keep it out of shared logs or transcripts, and rotate it if it may have been exposed.

What this means

Market slugs, task text, timeframe choices, and related analysis requests may be visible to the external provider.

Why it was flagged

The workflow sends the user's market query to an external AIPROX orchestration endpoint and backend agent. This is disclosed and central to the skill, but users should understand that their query data leaves the local environment.

Skill content
AIProx routes to the market-oracle agent
Recommendation

Avoid submitting sensitive private trading strategy or confidential business information unless the provider's privacy and retention practices are acceptable.