Stock Market Pro

PassAudited by ClawScan on May 10, 2026.

Overview

Stock Market Pro appears purpose-aligned for local stock research, with normal-but-noteworthy dependency installs, external web queries, and optional browser automation.

This skill looks reasonable for stock research. Before installing, be aware that running it may fetch Python packages and send ticker/search queries to Yahoo Finance, DuckDuckGo, or Unusual Whales. Use a virtual environment, run only the commands you need, and prefer the link-based options workflow unless you are comfortable with the Playwright browser helper.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing or running the scripts may download current versions of Python packages from external package sources.

Why it was flagged

The skill relies on third-party packages fetched at runtime or by user setup, and the documented install commands do not pin exact package versions.

Skill content
This skill uses `uv run --script` for dependency handling... Dependency: `pip3 install -U ddgs`
Recommendation

Use a virtual environment, review the dependencies, and prefer pinned/locked versions if you need reproducible or hardened installs.

What this means

If you invoke this helper, it runs browser automation locally and loads external web content.

Why it was flagged

The optional Unusual Whales helper can start a headless Chromium browser, with sandboxing disabled, to load a third-party market site.

Skill content
p.chromium.launch(
                headless=True,
                args=["--disable-gpu", "--no-sandbox"],
            )
Recommendation

Only run the browser helper when needed, prefer the documented browser-first link workflow when possible, and avoid `--no-sandbox` in stricter environments.

What this means

Repeated runs for the same ticker may overwrite the same chart file, and unusual ticker strings could create unexpected filenames.

Why it was flagged

The chart output filename is derived from the ticker symbol and written to a predictable /tmp path; normal stock tickers are expected, but the visible snippet does not show filename sanitization.

Skill content
path = f"/tmp/{symbol}_pro.png" ... savefig=path
Recommendation

Use ordinary ticker symbols only; maintainers should sanitize filenames or use a safe temporary-file API.