Edinet Mcp

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: edinet-mcp Version: 0.6.0 The skill bundle appears benign. It provides a tool for analyzing Japanese financial statements, requiring an `EDINET_API_KEY` for legitimate API access. The `SKILL.md` file contains standard instructions for installation and usage of the `edinet-mcp` binary, with no evidence of prompt injection attempts, data exfiltration, persistence mechanisms, or other malicious activities. All commands shown are directly related to the stated purpose of financial data analysis.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the skill will install and run a third-party CLI package for EDINET access.

Why it was flagged

The skill depends on an external package to provide the executable, and the supplied artifact set does not include that package's source code.

Skill content
uv | package: edinet-mcp | creates binaries: edinet-mcp
Recommendation

Install from a trusted package source, verify the package name and publisher where possible, and keep the tool updated.

What this means

The installed tool will be able to use the EDINET API key available in the environment.

Why it was flagged

The skill requires an API key, which is expected for EDINET access but still constitutes credential use.

Skill content
Requires `EDINET_API_KEY` environment variable
Recommendation

Use an EDINET-specific key only, avoid sharing broader credentials, and rotate the key if you suspect exposure.