NASDAQ Public API CLI
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
An agent using this skill can contact Nasdaq's public API and return market screener data, but the artifacts do not show local data upload, credential use, or destructive actions.
The bundled CLI performs outbound HTTP requests to Nasdaq. This is expected for a Nasdaq API skill, and the script validates supported options before building the URL.
curl --silent --show-error --fail ... -H "User-Agent: ${USER_AGENT}" ... "$url"Use reasonable limits and pagination, avoid burst loops, and make sure the requested market-data query is what you intend before allowing repeated calls.
You have less publisher/provenance context than with a skill that links to a public source repository or homepage.
The registry provenance information is minimal for a skill that includes a shell script, though the full script content is provided and no remote installer or hidden dependency is shown.
Source: unknown; Homepage: none; Install specifications: No install spec — this is an instruction-only skill.
Review the included script before installing or pin the skill to this reviewed version if you rely on it.