ClawHub

nasdaq100-futures

v1.0.4

Fetch the latest Nasdaq-100 futures quote (default NQ=F) via Yahoo Finance chart API using Node.js and return price, change, percent change, and timestamp. U...

⭐ 1· 299·2 current·3 all-time
by@lbl581581
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, SKILL.md, manifest, and scripts/main.js all align: the skill fetches a symbol from Yahoo Finance and returns price, change, percent, and timestamp. There are no unrelated required env vars, binaries, or config paths.
✓
Instruction Scope
SKILL.md instructs the agent to call the handler with an optional symbol parameter. The runtime code only performs an HTTP GET to query1.finance.yahoo.com and parses the JSON; it does not read local files, environment secrets, or send data to other endpoints.
✓
Install Mechanism
No install spec is provided (instruction-only with a bundled script). No downloads, package installs, or archive extraction occur; the skill relies on Node.js >= 18 and the platform-provided runtime.
✓
Credentials
The skill declares no required environment variables or credentials and the code does not attempt to access any. There are no disproportionate or unexplained secret requests.
✓
Persistence & Privilege
always is false (default), the skill does not request persistent system-wide changes, and it does not modify other skills or system configs. Runtime behavior is limited to outgoing HTTP requests.
Assessment
This skill simply performs an outgoing HTTP request to Yahoo Finance and formats the response; it does not ask for credentials or access local files. Before installing, consider: (1) the skill requires Node.js >= 18 for built-in fetch support (as documented), (2) network access to query1.finance.yahoo.com is required and subject to rate limits or blocking, and (3) if you need enterprise-level guarantees, review the small handler source (scripts/main.js) yourself. There are no obvious red flags in the manifest or runtime instructions.

Like a lobster shell, security has layers — review code before you run it.

latestvk975nwewe6scq4g68an23gv3bh82q7sq

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments