Arbiscan

PassAudited by ClawScan on May 1, 2026.

Overview

ArbiScan appears to be a read-only crypto market scanner that uses public exchange APIs, with optional CLI setup and trading-skill chaining that users should handle carefully.

This looks suitable as a read-only market scanner. Before installing or running it standalone, review the Python dependencies and use an isolated environment if possible. Do not let another trading skill execute orders from its output without your explicit confirmation and independent verification.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running scans will contact external crypto exchange APIs and may reveal normal network metadata such as your IP address to those services.

Why it was flagged

The skill makes outbound HTTP GET requests to exchange APIs; this is read-only and central to the market-scanning purpose, but users should expect network activity to third-party exchanges.

Skill content
resp = requests.get(url, params=params, timeout=REQUEST_TIMEOUT)
Recommendation

Use it when you are comfortable with public exchange API calls, and avoid treating network results as guaranteed trading instructions.

What this means

If you run the standalone CLI, your environment will install whatever compatible package versions pip resolves at that time.

Why it was flagged

Standalone CLI use depends on third-party Python packages with lower-bound constraints instead of exact pinned versions; this is common but worth noticing before installing.

Skill content
requests>=2.28.0
tabulate>=0.9.0
Recommendation

Install in a trusted or isolated Python environment, and pin or review dependency versions if you need reproducible or higher-assurance setup.

What this means

If you combine this scanner with trading/executor skills, a scan result could influence actual trades or financial decisions.

Why it was flagged

The skill itself is read-only, but the documentation shows its scan results may be chained into trading skills, where an incorrect or stale signal could lead to real financial action.

Skill content
"Use ArbiScan to find opportunities, then use Binance skill to execute the best one"
Recommendation

Require explicit review and confirmation before any downstream trading skill places orders based on ArbiScan output.