yf-finance

• Risk level: Low
• Analyzed: Apr 22, 2026, 1:48 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's requirements and instructions align with its stated purpose (wrapping yf-cli to query Yahoo Finance); it requests no credentials and its small install/usage steps are proportionate.

This skill is internally consistent: it uses the yf-cli tool to get Yahoo Finance data and does not ask for secrets. Before installing, ensure you trust the provenance of the external tools it invokes (uv and yf-cli) and that your environment allows network access. If you are concerned about autonomous invocation, note the skill can run yf-cli commands when invoked by the agent — consider restricting autonomous use or reviewing logs. If you need stronger guarantees, verify the sources for uv and yf-cli (package repositories/releases) and inspect the yf-cli code you will install.