Edinet Mcp

PassAudited by ClawScan on May 1, 2026.

Overview

This skill is coherently focused on EDINET financial-statement lookups, with expected notes around installing an external CLI package and using an EDINET API key.

This appears safe to use for EDINET financial-statement analysis if you are comfortable installing the `edinet-mcp` package and providing an EDINET-only API key. Verify the package source before installation and do not expose unrelated credentials in the environment.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing the skill will install and run a third-party CLI package for EDINET access.

Why it was flagged

The skill depends on an external package to provide the executable, and the supplied artifact set does not include that package's source code.

Skill content

uv | package: edinet-mcp | creates binaries: edinet-mcp

Recommendation

Install from a trusted package source, verify the package name and publisher where possible, and keep the tool updated.

Note

ASI03: Identity and Privilege Abuse

What this means

The installed tool will be able to use the EDINET API key available in the environment.

Why it was flagged

The skill requires an API key, which is expected for EDINET access but still constitutes credential use.

Skill content

Requires `EDINET_API_KEY` environment variable

Recommendation

Use an EDINET-specific key only, avoid sharing broader credentials, and rotate the key if you suspect exposure.