TickHub
PassAudited by ClawScan on May 10, 2026.
Overview
This instruction-only skill is narrowly focused on looking up live stock prices and does not request credentials, persistence, local file access, or installation.
This skill appears safe for simple stock price lookups. Be aware that the stock symbol or name you ask about may be sent to the external endpoint shown in the instructions, and the publisher should clarify the relationship between tickhub.net and the named finance data sources.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Stock symbols or company names provided by the user may be sent to the external quote service.
The skill directs the agent to use an external API endpoint to retrieve stock quote data. This is expected for the stated purpose, but it is still external network/tool use.
调用对应市场的实时行情API ... curl "https://tickhub.net/stock/600519"
Use it for non-sensitive market lookups, and avoid entering private account, trading, or portfolio information unless the skill is updated to clearly describe how such data is handled.
Users may assume the data is fetched directly from the named finance providers when the shown endpoint is a different domain.
The overview names 东方财富/新浪财经 as data sources, while the concrete example calls tickhub.net. This is not evidence of malicious behavior, but it is a minor disclosure mismatch about the actual provider endpoint.
通过东方财富/新浪财经API获取该股票的实时行情数据 ... curl "https://tickhub.net/stock/600519"
The publisher should clarify whether tickhub.net is a proxy, the primary data provider, or only an example endpoint.