Finnhub Skill

• Analyzed: May 12, 2026, 3:19 AM
• Findings: 1
• Version: 1.0.0
• Hash: d28c7eb97449b2cc9a731953034f83a95aa62c7b4db024a901dfc004be6e236b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It provides a Python script (`scripts/app.py`) to fetch real-time stock quotes using the Finnhub API. The script securely retrieves the Finnhub API key from an environment variable (`finnhub_api_key`), which is a standard practice. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts in `SKILL.md`, or obfuscation. All actions are clearly aligned with the stated purpose of accessing Finnhub data.