Finance Data Fetcher
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a straightforward market-data helper, with the main caveat that it references missing Python code and asks the user to install public Python packages manually.
Before installing, confirm where the missing skill_main.py implementation comes from and install the listed Python packages in an isolated environment. The artifacts do not show credential use, destructive behavior, or account mutation.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill may not work as described unless additional code is supplied, and users would need to trust separately installed Python packages.
The package declares a Python entrypoint, exported functions, and dependencies, but the provided manifest contains only skill.json and SKILL.md with no skill_main.py implementation. This is a functionality/provenance gap rather than evidence of malicious behavior.
"main": "skill_main.py", "exports": ["fetch_stock_quote", "fetch_financial_data", "fetch_capital_flow", "fetch_fundamental_indicators"], "dependencies": ["akshare", "pandas", "requests"]
Verify the missing implementation source before relying on the skill, and install dependencies from a trusted Python package environment.
Installing these packages gives their code the ability to run in the user's Python environment.
The skill asks for unpinned public Python package installation. This is expected for an AkShare-based data-fetching skill, but it is still a supply-chain dependency users should notice.
pip install akshare pandas numpy requests
Use a virtual environment, review package provenance, and pin versions if reproducibility matters.