Access Finnhub API for real-time stock quotes, company news, market data, financial statements, and trading signals

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent instruction-only Finnhub integration for market data; the main thing to protect is the Finnhub API key it uses.

This skill appears safe to install if you are comfortable giving OpenClaw access to a Finnhub API key for read-only market-data queries. Protect the key, monitor Finnhub usage and costs, and do not paste or share URLs that include the token.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may make Finnhub requests using your API key, which can reveal requested symbols/searches to Finnhub and may consume rate limits or paid-plan quota.

Why it was flagged

The skill needs a Finnhub credential and includes it in Finnhub API calls. This is purpose-aligned, but it gives the agent the ability to use that API key's quota and account entitlements.

Skill content
requires: { "env": ["FINNHUB_API_KEY"] } ... All requests require `?token=${FINNHUB_API_KEY}` parameter.
Recommendation

Use a Finnhub key with appropriate limits, monitor usage, and avoid sharing full request URLs or logs that contain the token.