Pipeworx alphavantage

Access real-time stock prices, historical data, company fundamentals, financial statements, and earnings for any stock symbol using Alpha Vantage.

Security Scan

The skill claims to provide Alpha Vantage data but routes requests through a third-party gateway (gateway.pipeworx.io) without declaring how authentication or data handling is performed, which is inconsistent and deserves caution.

Purpose & Capability

The name/description promise direct Alpha Vantage access, but the SKILL.md's only runtime artifact is an mcpServers entry pointing to https://gateway.pipeworx.io/alphavantage/mcp. No Alpha Vantage API key or official alphavantage endpoint is mentioned — it's unclear whether the gateway proxies official API calls, uses its own credentials, or performs other processing. That mismatch is not justified by the skill's metadata.

Instruction Scope

SKILL.md is minimal and does not specify what data the agent must send to the gateway, how requests are authenticated, or whether any local context or secrets will be included. It grants broad, unspecified runtime behavior (use MCP server) without describing what will be transmitted, creating a risk of unintended data disclosure.

Install Mechanism

There is no install spec and no code files — the skill is instruction-only, so nothing will be written to disk by an installer. This lowers direct supply-chain risk.

Credentials

No environment variables or credentials are declared, yet Alpha Vantage normally requires an API key. The absence of declared credentials suggests the gateway may hold or require credentials server-side (not transparent) or that the skill will make unauthenticated requests — both are plausible but unexplained. Also, the skill will depend on network access to a third-party domain (gateway.pipeworx.io) which is unrelated to alphavantage.co.

Persistence & Privilege

The skill is not always-on and is user-invocable. It does not request elevated platform privileges in the manifest and does not declare modifications to other skills or system-wide settings.

What to consider before installing

This skill shows a clear mismatch: it claims Alpha Vantage integration but sends requests to a third-party gateway (gateway.pipeworx.io) and declares no API key or privacy/accountability details. Before installing, ask the publisher: who operates gateway.pipeworx.io, where are Alpha Vantage credentials stored, what data is forwarded to that gateway, and is traffic logged or retained? Prefer skills that call the official alphavantage.co API with a declared API key so you control credentials. If you must use this skill, test it with non-sensitive queries, monitor outbound requests, and avoid sending private account information. If the publisher cannot explain the gateway's role or provide source code, treat the skill as untrusted.

Alphavantage

Alpha Vantage MCP — Stock market data, fundamentals, and earnings

av_quote

Get real-time stock price for a symbol (e.g., "AAPL"). Returns current price, change, percent change

av_daily

Get daily stock price history for a symbol (e.g., "AAPL"). Returns open, high, low, close, volume fo

av_overview

Get company fundamentals for a symbol (e.g., "AAPL"). Returns sector, market cap, P/E ratio, EPS, di

av_income_statement

Get annual and quarterly income statements for a symbol (e.g., "AAPL"). Returns revenue, gross profi

av_balance_sheet

Get annual and quarterly balance sheets for a symbol (e.g., "AAPL"). Returns total assets, liabiliti

av_earnings

Get quarterly earnings data for a symbol (e.g., "AAPL"). Returns reported and estimated EPS, surpris

{
  "mcpServers": {
    "alphavantage": {
      "url": "https://gateway.pipeworx.io/alphavantage/mcp"
    }
  }
}