Global Stock Analysis

PassAudited by ClawScan on May 7, 2026.

Overview

This is a straightforward market-data guide for Alpha Vantage, but users should verify the external CLI package and protect their API key.

Before installing, confirm that `marketdata-cli` is the package you intend to trust and keep your Alpha Vantage API key private. The reviewed files do not show hidden data collection, trading actions, persistence, or destructive behavior.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the CLI will run third-party code on the user's machine.

Why it was flagged

The skill relies on installing or running an external package that is not included in the reviewed artifact set. This is expected for the skill's purpose, but users should verify the package source.

Skill content
Install: `pip install marketdata-cli` or `uv tool install marketdata-cli --force` or run directly with `uvx marketdata-cli`
Recommendation

Install from a trusted source, consider using a virtual environment, and verify the package and publisher before use.

What this means

Commands may use the user's Alpha Vantage account quota or access level.

Why it was flagged

The skill requires an Alpha Vantage API key to access provider data. This is purpose-aligned and disclosed, but it is still a credential.

Skill content
Set API key (one of): `export ALPHAVANTAGE_API_KEY=your_key` ... Add `ALPHAVANTAGE_API_KEY=your_key` to a `.env` file ... Pass `-k your_key` on each command
Recommendation

Use a dedicated Alpha Vantage key, avoid sharing it in chats or logs, and store it securely.