mkts Market Data

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a straightforward instruction-only mkts.io market-data API skill, with the main considerations being outbound API requests, optional API-key registration, and possible financial portfolio/journal data handling.

Before installing, decide whether you trust mkts.io with your market queries and any portfolio or trade-journal details you choose to enter. If you register for a key, keep it private and use the sensitive financial features deliberately.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Market queries and request metadata will be sent to mkts.io and may count against rate limits.

Why it was flagged

The skill directs the agent to use curl for outbound API calls. This is expected for the stated market-data purpose, but generated URLs and parameters should still be user-intended.

Skill content
Base URL: `https://mkts.io/api/v1` ... `curl -s -H "X-API-Key: $MKTS_API_KEY" https://mkts.io/api/v1/market`
Recommendation

Use the skill for intended market-data requests and review any agent-generated curl URL before sending unusual or sensitive parameters.

What this means

If you register, mkts.io receives the supplied email/name and the API key can be used for higher-rate access.

Why it was flagged

The optional registration flow sends an email/name to mkts.io and creates an API key. This is disclosed and purpose-aligned, but it is still credential and identity-related handling.

Skill content
For higher limits, register for a free key and pass it via header: `-H "X-API-Key: $MKTS_API_KEY"` ... `-d '{"email":"you@example.com","name":"my-agent"}'`
Recommendation

Use a dedicated email/key if desired, store the API key securely, and avoid exposing it in shared logs or prompts.

What this means

Portfolio holdings, watchlists, and trade-journal content could reveal financial interests or strategy if entered into the service.

Why it was flagged

The skill advertises features that can involve sensitive personal financial information. Because the skill is API-based, users should treat those submissions as data shared with the provider.

Skill content
Track portfolios with P&L, allocation, and benchmark performance. Log trade rationale in a journal. Manage watchlists.
Recommendation

Only use portfolio or journal features if you are comfortable with mkts.io handling that financial data, and avoid submitting more detail than necessary.