Sectors Financial Agents
PassAudited by ClawScan on May 1, 2026.
Overview
This is a coherent read-only market-data API skill; users should review its API-key handling and optional local setup commands.
Before installing, confirm you are comfortable giving the skill access to a Sectors API key. Prefer a revocable key, avoid placing it in shared files, and use a virtual environment for the documented pip install.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent can use the user's Sectors API key to make market-data requests, potentially consuming API quota; if stored in shell files, the key remains on disk.
The skill needs a Sectors API credential and offers an optional persistent shell-profile setup. This is purpose-aligned for querying the API, but it gives the agent access to that API key and may store it persistently.
Requires the SECTORS_API_KEY environment variable... Always read it from the SECTORS_API_KEY environment variable... echo 'export SECTORS_API_KEY="your-api-key-here"' >> ~/.bashrc
Use a revocable API key, store it only where needed, avoid committing shell profiles or .env files, and remove the key when no longer using the skill.
Running the setup commands can modify the local Python environment and the setup script will contact api.sectors.app to verify the key.
The skill documents local Python and pip commands for setup and verification. These commands are disclosed and aligned with the API-integration purpose.
allowed-tools: Bash(python:*) Bash(pip:*) Read ... pip install requests ... python scripts/check_setup.py
Run setup commands in a virtual environment if possible, and only run the included check script when you want to verify connectivity.