mkts Market Data
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: mkts-market-data Version: 1.0.11 The skill bundle provides a comprehensive interface for financial market data and portfolio management via the mkts.io API. It uses standard curl commands for data retrieval and management, including endpoints for real-time quotes, historical data, SEC filings, and portfolio tracking. While it involves sending user-provided portfolio data and journal entries to a third-party server (mkts.io), this behavior is transparently documented and essential to the skill's stated purpose. No evidence of malicious execution, data exfiltration of sensitive local files, or prompt injection was found in SKILL.md or _meta.json.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Market queries and request metadata will be sent to mkts.io and may count against rate limits.
The skill directs the agent to use curl for outbound API calls. This is expected for the stated market-data purpose, but generated URLs and parameters should still be user-intended.
Base URL: `https://mkts.io/api/v1` ... `curl -s -H "X-API-Key: $MKTS_API_KEY" https://mkts.io/api/v1/market`
Use the skill for intended market-data requests and review any agent-generated curl URL before sending unusual or sensitive parameters.
If you register, mkts.io receives the supplied email/name and the API key can be used for higher-rate access.
The optional registration flow sends an email/name to mkts.io and creates an API key. This is disclosed and purpose-aligned, but it is still credential and identity-related handling.
For higher limits, register for a free key and pass it via header: `-H "X-API-Key: $MKTS_API_KEY"` ... `-d '{"email":"you@example.com","name":"my-agent"}'`Use a dedicated email/key if desired, store the API key securely, and avoid exposing it in shared logs or prompts.
Portfolio holdings, watchlists, and trade-journal content could reveal financial interests or strategy if entered into the service.
The skill advertises features that can involve sensitive personal financial information. Because the skill is API-based, users should treat those submissions as data shared with the provider.
Track portfolios with P&L, allocation, and benchmark performance. Log trade rationale in a journal. Manage watchlists.
Only use portfolio or journal features if you are comfortable with mkts.io handling that financial data, and avoid submitting more detail than necessary.