Tdnet Disclosure Mcp

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to be a straightforward TDNET disclosure lookup tool, with the main thing to notice being that it installs an external CLI package whose source code was not included in the artifacts.

This looks benign for looking up public Japanese market disclosures. The main installation consideration is that it relies on an external uv/Python package not included in the artifact set, so verify the package source if that matters for your environment.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the skill means trusting the external package that provides the tdnet-disclosure-mcp executable.

Why it was flagged

The skill depends on installing and running an external Python package binary, while the provided file manifest contains only SKILL.md and the source is listed as unknown.

Skill content
[0] uv | package: tdnet-disclosure-mcp | creates binaries: tdnet-disclosure-mcp
Recommendation

Before installing, confirm the package provenance and maintainer if you need higher assurance; otherwise the install method is consistent with the skill's stated purpose.

What this means

The agent may use this tool to fetch public financial disclosure information from an external service.

Why it was flagged

The skill is designed to invoke a CLI that queries an external web API. This is disclosed, read-only in the documentation, and aligned with retrieving public disclosure data.

Skill content
Access TDNET timely disclosures ... via the Yanoshin Web API
Recommendation

Use it for public TDNET disclosure lookups; avoid entering private or sensitive information into search terms unless you are comfortable sending those terms to the external API.