PineTS - PineScript executor

Run Pine Script indicators from the command line using pinets-cli. Use when asked to execute, test, or analyze Pine Script indicators, calculate technical an...

This skill is coherent and appears to be a documentation wrapper for the pinets-cli npm tool. Before installing or running it: 1) prefer installing the pinets-cli package yourself (npm install -g) or inspect the package source on the linked GitHub repo rather than blindly running npx; npx downloads and runs code from the npm registry at runtime. 2) Be aware the CLI may fetch market data over the network (Binance or other endpoints) — confirm it doesn't require or leak any API keys you don't want to share. 3) If you will run it in an automated agent, ensure the runtime environment already has the expected pinets binary or that installing from npm is acceptable for your security posture.

Type: OpenClaw Skill Name: pinets Version: 1.0.0 The skill is suspicious due to its reliance on `npm install -g pinets-cli` for installation, introducing a significant supply chain risk if the external package is compromised. Additionally, the skill allows piping arbitrary Pine Script code from stdin to the `pinets` binary, meaning any sandbox escape vulnerability in the Pine Script runtime could lead to arbitrary code execution. While the skill's stated purpose is benign, these capabilities present high-risk attack surfaces (SKILL.md).