FireAnt Stock Price Checker
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears to fetch public Vietnamese stock data as advertised, but its dependency and package metadata are inconsistent and should be checked before use.
This skill is generally aligned with its advertised function of retrieving public FireAnt stock data. Before use, make sure the agent-browser executable is installed from a trusted source and note that the package metadata should be corrected to match the registry version and slug.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill may not work on many systems, or it may execute whatever local program exists at that hard-coded path.
The script depends on an external agent-browser executable at a hard-coded, user-specific path, while the registry declares no required binaries and no install spec. This creates dependency/provenance ambiguity, though the browser automation is aligned with the stock-checking purpose.
result = subprocess.run(\n ['/Users/loc/Library/pnpm/agent-browser'] + args,
Before installing or using, confirm the agent-browser binary is trusted and request that the package declare the dependency and use a normal resolved command path rather than a developer-specific absolute path.
Users may have less confidence that the packaged artifact identity and registry entry refer to the same reviewed version.
The packaged metadata differs from the supplied registry identity, which lists the slug as fireant-stock and version as 1.1.0. This is a provenance/coherence issue, not by itself evidence of harmful behavior.
"slug": "vietstock",\n "version": "1.0.0"
Verify the publisher and version before installing, and ask the maintainer to align the embedded metadata with the registry entry.
