Yahoo Finance FOREX

PassAudited by ClawScan on May 1, 2026.

Overview

The skill appears coherent and purpose-aligned for fetching Yahoo Finance forex data, with no evidence of credential access, persistence, hidden mutation, or exfiltration.

This skill looks safe to install from the provided artifacts if you are comfortable with it running a Python script and using the yfinance package to fetch Yahoo Finance data. Do not treat its keyword-based BUY/SELL/HOLD output as financial advice.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI02: Tool Misuse and Exploitation

What this means

The agent may run the bundled script and make Yahoo Finance data requests when answering forex questions.

Why it was flagged

The skill instructs the agent to run a local Python script. This is expected for the stated purpose and the included script restricts supported pairs and limits news results, but users should know local command execution is part of normal operation.

Skill content

Run: `python3 scripts/fetch_forex_news.py EURUSD --limit 8`

Recommendation

Use it for the intended forex data workflow and review outputs before relying on them for decisions.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing or updating the skill may install a newer compatible yfinance release from the Python package ecosystem.

Why it was flagged

The skill depends on an external PyPI package with a lower-bound version rather than an exact pin. This is purpose-aligned for Yahoo Finance data access, but it is still a supply-chain dependency users should notice.

Skill content

packages: ["yfinance>=0.2.40"]

Recommendation

Install in a trusted Python environment, preferably a virtual environment; pin or review dependencies if you need strict reproducibility.

Low

#ASI09: Human-Agent Trust Exploitation

What this means

Users might mistake the sentiment output for professional trading advice.

Why it was flagged

The skill presents trading-style recommendations based on simple keyword scoring. The artifacts also disclose limitations, so this is not deceptive, but the wording could be over-trusted for financial decisions.

Skill content

| > +2 | Bullish | BUY | ... | < -2 | Bearish | SELL |

Recommendation

Treat BUY/SELL/HOLD outputs as a lightweight signal only, and verify with independent analysis before making financial decisions.