BOC Forex Monitor

PassAudited by ClawScan on May 12, 2026.

Overview

This skill appears to do what it says—monitor Bank of China exchange rates and optionally send alerts—but it creates a recurring cron monitor and can store/send notification details that users should configure carefully.

This looks reasonable for a scheduled forex alert tool. Before installing, review the cron schedule, run it manually once, confirm the notification target/account, and keep the `.openclaw-state` directory private.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI10: Rogue Agents

What this means

After setup, the monitor can keep running on schedule and may continue checking rates or sending alerts until the cron job is changed or removed.

Why it was flagged

The skill intentionally sets up a recurring background monitor every five minutes during the configured hours.

Skill content

Create or update a cron job with the OpenClaw `cron` tool... { "kind": "cron", "expr": "*/5 9-22 * * *", "tz": "Asia/Shanghai" }

Recommendation

Only create the cron job if you want persistent monitoring, verify the schedule and workspace path, and keep a clear way to pause or remove the job.

Low

#ASI03: Identity and Privilege Abuse

What this means

If notification settings are provided, the skill can send forex alert messages through the configured OpenClaw messaging account.

Why it was flagged

The runner can use OpenClaw's messaging authority to send an alert to the user-supplied channel and target, optionally with an account id.

Skill content

cmd = ['openclaw', 'message', 'send', '--channel', channel, '--target', target, '--message', message]

Recommendation

Use only intended notification targets/accounts, consider `--no-notify` for local testing, and avoid using overly broad or shared messaging credentials.

Low

#ASI06: Memory and Context Poisoning

What this means

The workspace state may reveal recipient/account identifiers and alert history if the workspace is shared, synced, or committed to version control.

Why it was flagged

The notification dedupe state persists the notification channel, target, and account id under the workspace .openclaw-state directory.

Skill content

'channel': args.notify_channel,
                'target': args.notify_target,
                'accountId': args.notify_account_id

Recommendation

Keep `.openclaw-state` private, exclude it from public repositories, and delete the state file if you no longer want those identifiers retained.