Query real-time and historical financial data across equities and crypto prices

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a coherent market-data skill, but it uses an AISA API key and sends requested ticker or portfolio queries to an external API.

This skill looks purpose-aligned for market-data lookup. Before installing, make sure you trust the AISA/OpenClaw service with your API key and with any ticker lists, portfolio references, or screening criteria you ask it to analyze.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Anyone using the skill is authorizing requests against their AISA account, which may affect account usage, billing, quotas, or audit logs depending on the provider.

Why it was flagged

The client reads an API key from the environment and uses it as a bearer token for AISA API requests.

Skill content
self.api_key = api_key or os.environ.get("AISA_API_KEY") ... "Authorization": f"Bearer {self.api_key}"
Recommendation

Use a dedicated, least-privileged AISA API key if available, monitor usage, and revoke or rotate the key if you stop using the skill.

What this means

Ticker lists, screening filters, and research interests may reveal parts of a user's portfolio or investment focus to the external API provider.

Why it was flagged

The documented workflows include portfolio-style ticker queries, and the skill sends those query parameters to an external API provider.

Skill content
"Get BTC, ETH prices alongside AAPL, NVDA stock data for my portfolio"
Recommendation

Avoid sending sensitive or uniquely identifying portfolio details unless you are comfortable sharing those queries with the AISA API service.