ClawHub

singa- finance

v1.0.0

Fetch professional stock market data from Yahoo Finance (yfinance) and SEC EDGAR. Use when: user asks about stock prices, market data, company financials, ea...

⭐ 1· 88·2 current·2 all-time
by@1shadow1
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the included scripts and examples: the skill only needs python3 and yfinance to query Yahoo Finance and uses urllib to query SEC endpoints. No unrelated credentials, binaries, or config paths are requested.
ℹ
Instruction Scope
Runtime instructions and CLI examples are focused on finance data. The SEC component accepts a URL for read-filing (intended to be the SEC URL from filings output) — that allows fetching arbitrary URLs if supplied, which is expected for 'read-filing' but could be misused to fetch internal resources (SSRF-like risk) if callers provide arbitrary URLs.
✓
Install Mechanism
No packaged install; scripts are provided and SKILL.md instructs pip install -r requirements.txt. requirements.txt contains only yfinance, which is proportionate.
✓
Credentials
Only optional SEC_EDGAR_USER_AGENT is suggested (per SEC policy). No secrets, API keys, or unrelated environment variables are requested.
✓
Persistence & Privilege
Skill is not always-enabled and uses normal agent invocation. It does not request persistent system-wide changes or other skills' credentials.
Assessment
This skill appears to do what it says: it runs the included Python scripts to fetch Yahoo Finance and SEC EDGAR data and only needs python3 and the yfinance package. Before installing: (1) review and run the scripts in a safe environment if you can, (2) set SEC_EDGAR_USER_AGENT as recommended to comply with SEC policy, (3) be cautious when using the read-filing command — it will fetch the URL you provide, so don’t pass internal or sensitive network addresses, and (4) keep the yfinance dependency up-to-date. There are no unexpected credential requests or install steps.

Like a lobster shell, security has layers — review code before you run it.

latestvk972gygeb66bge4c3aq2hf05rx84e203

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📊 Clawdis
Binspython3

Comments