ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Etf

v2.0.0

Analyze ETF holdings, compare fund metrics, and review sector allocation data. Use when screening ETFs, comparing ratios, or tracking allocations.

⭐ 0· 116·1 current·1 all-time
by@bytesagain3
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description promise ETF analysis; the shipped script implements a local CLI that logs entries, searches, exports, and shows stats — all consistent with a small offline utility.
✓
Instruction Scope
SKILL.md and the script operate only on the declared local data directory (~/.local/share/etf) and standard shell utilities (grep, tail, du, wc). There are no instructions to read unrelated system files or to transmit data off-machine.
✓
Install Mechanism
No install spec is provided (instruction-only). The bundle includes a plain shell script; nothing is downloaded or extracted from external URLs at install time.
✓
Credentials
The skill requires no environment variables, credentials, or external service tokens. It only uses $HOME to build its own data directory, which is appropriate for a local CLI tool.
✓
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and only writes to its own data dir under the user's home. Its persistent footprint is limited to ~/.local/share/etf and the installed script.
Assessment
This tool stores all entries and history under ~/.local/share/etf and can export them to JSON/CSV/TXT. Before using, be aware that anything you type (including sensitive text) will be saved in those log files. Periodically check disk usage if you log a lot, and remove ~/.local/share/etf to fully delete recorded data. If you plan to share exported files, review them first to avoid leaking secrets.

Like a lobster shell, security has layers — review code before you run it.

latestvk9784tv1gfvejx5hre2f0pqjj1834mg8

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments