Stockmarket
v1.0.0Access real-time and historical stock market data via Alpha Vantage API. Get quotes, time series, technical indicators, fundamentals, forex, crypto, and comm...
⭐ 0· 43·0 current·0 all-time
byRay Chan, PMP@raychanpmp
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the included CLI (scripts/stock_data.py) and the SKILL.md commands. All required functionality (quotes, time series, indicators, forex, crypto, commodities, news) is implemented as API calls to alphavantage.co; nothing in the files asks for unrelated services or credentials.
Instruction Scope
SKILL.md instructs running the included Python script and optionally setting ALPHA_VANTAGE_KEY or passing --key. The script only constructs HTTP requests to https://www.alphavantage.co/query, parses JSON, and prints results. There are no instructions to read arbitrary files, access unrelated env vars, or transmit data to other endpoints.
Install Mechanism
No install spec is present and the Python script uses only the standard library (urllib). Nothing is downloaded from external URLs or written to disk beyond running the included script, so there is low install risk.
Credentials
No required env vars are declared, which is reasonable since the script falls back to a 'demo' key. It optionally reads ALPHA_VANTAGE_KEY or accepts --key; this is proportional to the skill's function. Users should still protect any API key they supply (it provides access to their quota).
Persistence & Privilege
always is false and the skill does not request system or other-skill configuration changes. It does not write persistent credentials or modify global agent settings.
Assessment
This skill appears to do exactly what it says: call Alpha Vantage and return JSON results. Before installing, consider: (1) review scripts/stock_data.py yourself (it's included) if you want assurance there is no hidden behavior; (2) if you supply an ALPHA_VANTAGE_KEY, keep it private—the key controls your request quota; (3) be mindful of Alpha Vantage rate limits (demo/free tier); and (4) run the skill in an environment with only the network access you expect (no need to grant extra system permissions). If you need higher assurance, run the script once locally to inspect outputs and traffic (or monitor network calls) before enabling autonomous agent invocation.Like a lobster shell, security has layers — review code before you run it.
latestvk97cf6sm4g1rn9pkzwnwakv30583xp77
License
MIT-0
Free to use, modify, and redistribute. No attribution required.