ClawAudit verdict
airoom-finance
The skill seems to be part of a larger project to empower AI with economic market data, but the description contains concerning themes.
โ Flagged for review โ coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis โ not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Permission integrity
package_install
Findings (1)
Long base64 string (100+ chars) โ likely obfuscated payload
SKILL.md ยท prose ยท downgraded ยท 304402206c8bd6bc54c9c06db31fd8ca8c41d3f6a0b6bfcd279290aeec1a6ed60ab97b73022071fc
Permissions & capabilities
No declared permissions โ minimal attack surface.
package_install Is this flag fair?
Thanks โ recorded.