Infoway Financial API — Real-Time Quotes, Klines & Analysis
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill is internally consistent with its stated purpose: a small MCP server that exposes financial-data tools and only requires an Infoway API key; nothing in the package asks for unrelated credentials or system access.
This skill appears to do what it claims: an MCP server that queries Infoway's API and only needs an INFOWAY_API_KEY. Before installing, verify the package and its dependencies (infoway-sdk, mcp) on PyPI or the referenced GitHub repository to ensure the publisher is legitimate. Treat INFOWAY_API_KEY as a sensitive secret (don't paste it into public places). If you have concerns, run the package in an isolated environment (virtualenv or container) and inspect the infoway-sdk code (or the network calls it makes) to confirm endpoints and behavior.
SkillSpector
SkillSpector findings are pending for this release.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.