MarketPulse (Stocks + Crypto Data)
PassAudited by ClawScan on May 1, 2026.
Overview
MarketPulse appears to be a purpose-aligned market-data skill that queries AIsa’s API using an API key, with no artifact-backed evidence of destructive or deceptive behavior.
Before installing, confirm you trust the AIsa API provider and the skill publisher enough to use an API key. The skill appears read-only for market data, but API queries and the bearer token are sent to api.aisa.one.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Ticker symbols, date ranges, screening filters, and similar market-data queries are sent to the AIsa API.
The skill makes outbound API requests to AIsa to retrieve market data. This is disclosed and central to the stated purpose, but users should understand that their query parameters are sent to that provider.
BASE_URL = "https://api.aisa.one/apis/v1" ... urllib.request.urlopen(req, timeout=60)
Use the skill for intended market-data lookups, and avoid including confidential portfolio details unless you are comfortable sending them to the API provider.
Anyone using the skill must provide an AIsa API key, which authorizes requests to that service and may affect quota or billing depending on the provider.
The client reads an API key from the environment and sends it as a bearer token to the AIsa API. This is expected for the integration and is also disclosed in the skill requirements.
self.api_key = api_key or os.environ.get("AISA_API_KEY") ... "Authorization": f"Bearer {self.api_key}"Use a dedicated, least-privileged API key if available, keep it out of logs and prompts, and rotate it if it may have been exposed.
Users have less information for independently verifying who maintains the skill or how updates are produced.
The registry metadata does not identify a source repository or verified upstream source. The included artifacts are coherent, but provenance is limited.
Source: unknown
Review the included files before installation and prefer verified publisher/source information for production or sensitive workflows.