Sentiment Bot
PassAudited by ClawScan on May 1, 2026.
Overview
The skill is a coherent sentiment-analysis wrapper for an external API, with the main things to notice being third-party text processing and use of a paid spend token.
This skill appears benign and purpose-aligned. Before installing, be aware that it sends analyzed text or URL content to an external service and uses an AIPROX_SPEND_TOKEN that may consume paid quota.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the token is misconfigured or over-permissive, API calls could consume paid quota.
The skill requires reading a spend token and sends it as an API authentication header, which is expected for the paid AIProx service but still grants billing-related authority.
| Env Read | AIPROX_SPEND_TOKEN | Authentication for paid API |
Use a limited or revocable spend token, monitor usage, and avoid exposing the token in prompts or shared logs.
Text, URLs, and analyzed content may leave the local environment and be processed by third-party services.
The skill discloses that submitted text or fetched URL content is routed through external provider infrastructure for analysis.
AIProx routes to the sentiment-bot agent ... Analysis is performed by Claude via LightningProx.
Do not submit confidential or regulated content unless the provider terms, retention policy, and data-handling guarantees are acceptable.