Global Market Feed

This skill appears to be a small, focused REST client for QuoteNode, but there are a few things to check before installing: - Expect to provide two secrets: an endpoint URL and an API key. The code reads these from datatk-quote-skill/env.json, but the registry metadata did not declare any required credentials — confirm where you must store the API key and treat it as a secret. - Fix the example filename mismatch: SKILL.md suggests env.json.example, but the repository includes env.example.json. Ensure you create datatk-quote-skill/env.json with the correct keys (endpoint and apiKey) and do not commit it to source control. - The script contains safety checks: it requires HTTPS, disallows raw IPs, and allowlists datatk.com domains. Review that allowlist if you intend to use a private gateway. - Because the API key is stored locally (not a declared platform credential), be careful about backups, repositories, or logs that might include it. Prefer using platform-managed secrets if available. - You can test the script locally (node scripts/request.mjs --path /Api/V1/... --body '{...}') to confirm behavior. If you rely on automated agent invocation, consider whether you want the agent to have access to the local env.json; if not, do not enable autonomous invocation for this skill. If you need, I can produce a short checklist or patch suggestions to: (1) correct the example filename, and (2) update the skill metadata to declare the required credential so the platform can handle it more safely.