Veroq
v1.0.2Provide verified AI intelligence on markets, assets, sentiment, and economic data with live prices, signals, analysis, and fact-checking from 1,000+ tickers...
⭐ 0· 71·0 current·0 all-time
byJohnny@johnnytarrr
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (market intelligence, verification, tickers, signals) matches the included code and declared commands. The code only contacts https://api.veroq.ai and implements the advertised commands (ask, verify, news, price, etc.). There are minor metadata inconsistencies (registry metadata version 1.0.2 vs skill.json version 2.7.0 and source/homepage claims), but these are likely packaging/metadata issues rather than functional mismatches.
Instruction Scope
SKILL.md and index.js restrict network activity to api.veroq.ai endpoints and implement request/response flows for the listed commands. However, the skill will transmit user-supplied queries/claims to a third-party API (veroq) — SKILL.md asserts 'No user data: Queries are not stored or shared', which is a provider claim the skill cannot enforce locally. Also note commands like /crawl and /web-search imply handling user-supplied URLs/queries which are forwarded to the external service.
Install Mechanism
No install spec is provided (no external downloads or installers). The skill includes source files but does not attempt to run or install additional binaries or pull code at runtime. This minimizes install-time risk.
Credentials
The skill declares no required environment variables, no credentials, and the code does not read env vars or local config paths. The network calls are proportional to the stated purpose (calling a public API).
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges. There is no evidence it modifies other skills or system configuration. It does reference a self-hosted docker option in docs (for on-prem use), which is optional.
Assessment
This skill appears to do what it claims: it forwards your questions and commands to api.veroq.ai and returns the provider's responses. Before installing, consider: 1) privacy — any query or URL you send through this skill will be transmitted to the remote service; do not send secrets, private documents, or PII unless you trust the provider and have reviewed their privacy/retention policy. 2) Verify provider identity — the registry metadata shows 'source: unknown' and there is a version mismatch in skill.json; if this will be used in production, prefer official verified integrations or the self-hosted option. 3) Alerts/backtests that accept webhook URLs or payloads could cause data to be sent to endpoints you configure — avoid embedding credentials in those URLs/payloads. If you need stronger guarantees, run the self-hosted Docker variant and review the server-side code and privacy settings before sending sensitive data.Like a lobster shell, security has layers — review code before you run it.
AIvk97fpxjkvejs8hxhw8vwart0c183t9kqAPIvk97fpxjkvejs8hxhw8vwart0c183t9kqSSEvk97fpxjkvejs8hxhw8vwart0c183t9kqagentsvk971x0f38qp9aae0d4vb3qrgtd845f8baivk971x0f38qp9aae0d4vb3qrgtd845f8baskvk97fpxjkvejs8hxhw8vwart0c183t9kqcryptovk97fpxjkvejs8hxhw8vwart0c183t9kqearningsvk97fpxjkvejs8hxhw8vwart0c183t9kqenterprisevk971x0f38qp9aae0d4vb3qrgtd845f8bfact-checkvk971x0f38qp9aae0d4vb3qrgtd845f8bfinancevk971x0f38qp9aae0d4vb3qrgtd845f8bintelligencevk97fpxjkvejs8hxhw8vwart0c183t9kqknowledge-basevk971x0f38qp9aae0d4vb3qrgtd845f8blatestvk971x0f38qp9aae0d4vb3qrgtd845f8bllmvk971x0f38qp9aae0d4vb3qrgtd845f8bmarket-datavk971x0f38qp9aae0d4vb3qrgtd845f8bmcpvk971x0f38qp9aae0d4vb3qrgtd845f8bnewsvk97fpxjkvejs8hxhw8vwart0c183t9kqragvk971x0f38qp9aae0d4vb3qrgtd845f8breal-timevk97fpxjkvejs8hxhw8vwart0c183t9kqscreenervk97fpxjkvejs8hxhw8vwart0c183t9kqsearchvk97fpxjkvejs8hxhw8vwart0c183t9kqself-hostedvk971x0f38qp9aae0d4vb3qrgtd845f8bsentimentvk97fpxjkvejs8hxhw8vwart0c183t9kqshieldvk971x0f38qp9aae0d4vb3qrgtd845f8bstocksvk97fpxjkvejs8hxhw8vwart0c183t9kqstreamingvk97fpxjkvejs8hxhw8vwart0c183t9kqtechnical-analysisvk97fpxjkvejs8hxhw8vwart0c183t9kqtradingvk971x0f38qp9aae0d4vb3qrgtd845f8bverificationvk971x0f38qp9aae0d4vb3qrgtd845f8bverifyvk97fpxjkvejs8hxhw8vwart0c183t9kqwebvk97fpxjkvejs8hxhw8vwart0c183t9kq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.