Global Stock Analysis

AdvisoryAudited by Static analysis on May 7, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the CLI will run third-party code on the user's machine.

Why it was flagged

The skill relies on installing or running an external package that is not included in the reviewed artifact set. This is expected for the skill's purpose, but users should verify the package source.

Skill content
Install: `pip install marketdata-cli` or `uv tool install marketdata-cli --force` or run directly with `uvx marketdata-cli`
Recommendation

Install from a trusted source, consider using a virtual environment, and verify the package and publisher before use.

What this means

Commands may use the user's Alpha Vantage account quota or access level.

Why it was flagged

The skill requires an Alpha Vantage API key to access provider data. This is purpose-aligned and disclosed, but it is still a credential.

Skill content
Set API key (one of): `export ALPHAVANTAGE_API_KEY=your_key` ... Add `ALPHAVANTAGE_API_KEY=your_key` to a `.env` file ... Pass `-k your_key` on each command
Recommendation

Use a dedicated Alpha Vantage key, avoid sharing it in chats or logs, and store it securely.