ClawHub

juglans market price (ALL markets, ALL realtime)

v1.0.0

Real-time market price data for 25,000+ assets across crypto, US stocks, Hong Kong stocks, China A-shares, forex, ETFs, commodities, and global indices. Zero...

⭐ 0· 133·0 current·0 all-time
by@juglans-ai
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description promise real-time market prices and the SKILL.md instructs the agent to map symbols and call https://finance.juglans.ai/api/v1/ticker. No unrelated credentials, binaries, or system paths are requested—this is consistent with a market-data skill.
✓
Instruction Scope
Runtime instructions are scoped to symbol mapping, issuing curl requests to the Juglans Finance API, and formatting JSON responses. The instructions do not ask the agent to read local files, environment variables, or send data to other endpoints. Allowed-tools: Bash and use of curl are expected for this skill.
ℹ
Install Mechanism
Install is a small shell script that writes SKILL.md into ~/.claude/skills/price and downloads content from raw.githubusercontent.com (juglans-ai). Using raw GitHub URLs is common and lower risk than arbitrary servers, but the README and install.sh reference slightly different repository names (juglans-price vs juglans-market-price), which is an inconsistency worth checking before piping a script into bash.
✓
Credentials
The skill requests no environment variables or credentials. Its functionality (public market data) does not appear to require secrets, so the lack of required credentials is proportionate.
✓
Persistence & Privilege
The installer writes only to its own skill directory under the user's home (~/.claude/skills/price). always:false and normal autonomous invocation are in place. The skill does not modify other skills or system-wide settings.
Assessment
This skill appears coherent with its stated purpose, but exercise the usual caution with third-party skills that make network calls. Before installing: 1) Verify the HTTPS endpoint (https://finance.juglans.ai) and confirm you trust the Juglans Finance domain; 2) Inspect the SKILL.md and install.sh yourself (don't blindly run curl | bash); 3) Note the repo-name mismatch in README vs install.sh—confirm the correct repository/URLs on GitHub; 4) Be aware the skill will make outbound requests for every price lookup (monitor network activity if needed); 5) If you require stronger assurance, manually download the SKILL.md into a sandboxed environment, test several queries, and review the JSON responses to ensure no unexpected redirects or data collection beyond price results.

Like a lobster shell, security has layers — review code before you run it.

latestvk976x54rdq4mz9wcgf6h246v5h83gepv

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments