NASDAQ Public API CLI
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a straightforward Nasdaq public-data CLI skill with no credential use, persistence, local data access, or data-changing behavior.
This skill looks safe for querying public Nasdaq screener data. Before installing, note that it may run a bundled shell script and make outbound requests to Nasdaq; review the script if provenance matters to you and use sensible pagination/rate limits.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
An agent using this skill can contact Nasdaq's public API and return market screener data, but the artifacts do not show local data upload, credential use, or destructive actions.
The bundled CLI performs outbound HTTP requests to Nasdaq. This is expected for a Nasdaq API skill, and the script validates supported options before building the URL.
curl --silent --show-error --fail ... -H "User-Agent: ${USER_AGENT}" ... "$url"Use reasonable limits and pagination, avoid burst loops, and make sure the requested market-data query is what you intend before allowing repeated calls.
You have less publisher/provenance context than with a skill that links to a public source repository or homepage.
The registry provenance information is minimal for a skill that includes a shell script, though the full script content is provided and no remote installer or hidden dependency is shown.
Source: unknown; Homepage: none; Install specifications: No install spec — this is an instruction-only skill.
Review the included script before installing or pin the skill to this reviewed version if you rely on it.