ClawHub

Mfapi

v0.1.0

Query Indian mutual fund NAV data, scheme info, and history via the free MFapi.in REST API.

⭐ 0· 285·0 current·0 all-time
byKanak Singhal@kanaksinghal
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (query MFapi.in for NAVs/scheme info) match the requested binaries (curl, jq) and the included Python script. There are no unrelated credentials, binaries, or config paths requested; everything requested is proportionate to the stated functionality.
ℹ
Instruction Scope
SKILL.md instructs the agent to call https://api.mfapi.in and to use curl/jq or the provided Python script. The Python script downloads the full scheme list (~37k entries) and caches it in /tmp/mfapi-schemes.json (auto-refresh after 24h or on cache-miss). This is within scope but note the large cached download and that the script writes to /tmp.
✓
Install Mechanism
No install spec is provided (instruction-only). Examples use system packages (curl, jq) and the included Python script uses only the Python standard library. There are no external archive downloads or opaque install steps.
✓
Credentials
No environment variables or credentials are required. The script only communicates with api.mfapi.in and does not request unrelated secrets or access to other services.
ℹ
Persistence & Privilege
The skill is not always-enabled and uses normal autonomous invocation defaults. It creates a local cache at /tmp/mfapi-schemes.json which is ephemeral but world-readable on many systems; this is expected for caching public data but worth noting on multi-user systems.
Assessment
This skill appears to do exactly what it says: query the public MFapi.in service for mutual fund NAVs. It requires curl and jq (or Python 3 to run the included script) and does not ask for any API keys. Things to consider before installing: (1) the included script will download and cache the full scheme list (~37k records) to /tmp/mfapi-schemes.json — this consumes bandwidth and disk space and the file may be world-readable on multi-user systems (the data itself is public). (2) There are no rate-limit guarantees from the API; avoid automated high-frequency polling to prevent abuse. (3) Ensure curl/jq/python are installed from trusted sources. Overall the components, instructions, and file access are coherent with the stated purpose.

Like a lobster shell, security has layers — review code before you run it.

latestvk97e2w3wcvprhfd922ekg1e0qn823kgb

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

₹ Clawdis
Binsjq, curl

Comments