Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (index + market analysis) align with the provided artifacts: the package contains a catalog and per-category JSON reference files (688 indices) which the SKILL.md requires the agent to read to recommend indices. There are no unrelated environment variables, binaries, or install steps requested.
Instruction Scope
SKILL.md instructs the agent to (a) read index_catalog.json to find the right category and (b) read the corresponding references file for index details — this is appropriate and narrowly scoped. It explicitly forbids reading unrelated system files, avoids real‑time price queries, and requires human‑facing output formatting and compliance disclaimers. The references contain external URLs (txfund.com) which the skill will surface as links when present — this is expected behavior but note that the skill may produce outbound links to a third‑party site.
Install Mechanism
No install spec and no code files to execute — instruction‑only skill. This has low install risk because nothing is downloaded or written to disk at install time.
Credentials
The skill declares no required environment variables, no primary credential, and no config paths. The SKILL.md does not instruct accessing secrets or external credentials. Requested access is proportionate to its stated purpose.
Persistence & Privilege
Flags: always=false (normal). user-invocable and model invocation enabled (default). The skill does not request permanent/privileged presence or modify other skills or system settings.
Assessment
This skill appears internally coherent and low risk: it uses bundled JSON reference data and does not ask for credentials or install software. Before installing, consider: (1) provenance — the package source/homepage is unknown, so prefer publishers you trust; (2) data freshness — references.last_updated is 2026-04-01, verify if you need newer index data; (3) external links — recommendations may include clickable links to txfund.com (check that URL if you click it); and (4) privacy — do not paste personal holdings or sensitive account info into the skill (the SKILL.md correctly refuses holding-level analysis). If you require real‑time quotes or trade instructions, this skill explicitly does not provide them.Like a lobster shell, security has layers — review code before you run it.
latestvk9724s5w0pmng0pb2nbg0v2sh1844j3n
License
MIT-0
Free to use, modify, and redistribute. No attribution required.