One API key for real time stock equity pricing data including crypto BTC ETH etc.

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to query a disclosed market-data API using the user's AISA API key, with no evidence of deceptive, destructive, or unrelated behavior.

Before installing, confirm that you are comfortable providing an AISA_API_KEY for stock and crypto market-data queries, and consider using a limited or dedicated key if your provider supports quotas or scoped credentials.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI03: Identity and Privilege Abuse

What this means

Using the skill gives it access to use your AISA API key for market-data queries, which may consume quota or incur provider-side usage depending on your account.

Why it was flagged

The client reads the user's AISA API key and sends it as a bearer token to the disclosed AISA market-data API; this credential use is expected for the stated purpose.

Skill content

self.api_key = api_key or os.environ.get("AISA_API_KEY") ... "Authorization": f"Bearer {self.api_key}"

Recommendation

Use a dedicated AISA API key with the minimum needed permissions or quota limits if available, and rotate it if you no longer use the skill.