Naver Stock

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a straightforward Node-based stock-price lookup that fetches public market data from Naver Finance without requesting credentials or account-changing permissions.

This skill looks appropriate for fetching public stock and exchange-rate information. Before installing, be aware that it runs a bundled Node.js file locally and will likely contact Naver Finance with the stock symbol, name, or currency query you provide.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The script runs locally with the permissions of the user or agent that invokes it.

Why it was flagged

The skill is intended to execute a bundled local Node.js script. This is disclosed and central to the stock lookup function, but it is still local code execution on the user's machine.

Skill content
Run the bundled script with a stock name or code.

node index.cjs "삼성전자"
node index.cjs "AAPL"
Recommendation

Install only if you are comfortable running the bundled JavaScript and use it for explicit stock or exchange-rate lookup requests.

What this means

Stock names, symbols, or currency queries may be sent to Naver Finance to retrieve prices.

Why it was flagged

The skill sends lookup requests to an external finance data source, which is expected for its purpose and does not show hidden or unrelated data transmission.

Skill content
Fetch real-time stock prices for domestic (KRX) and overseas markets using Naver Finance.
Recommendation

Avoid using the skill for private or sensitive query terms; use it for ordinary public stock, symbol, or exchange-rate lookups.