Naver Stock

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: naverstock-skill Version: 1.1.1 The skill is a legitimate tool designed to fetch real-time stock prices and exchange rates from Naver Finance. The code in index.cjs implements standard API calls to official Naver endpoints (m.stock.naver.com and polling.finance.naver.com) and contains no evidence of data exfiltration, unauthorized execution, or malicious prompt injection.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI05: Unexpected Code Execution

What this means

The script runs locally with the permissions of the user or agent that invokes it.

Why it was flagged

The skill is intended to execute a bundled local Node.js script. This is disclosed and central to the stock lookup function, but it is still local code execution on the user's machine.

Skill content

Run the bundled script with a stock name or code.

node index.cjs "삼성전자"
node index.cjs "AAPL"

Recommendation

Install only if you are comfortable running the bundled JavaScript and use it for explicit stock or exchange-rate lookup requests.

Note

ASI02: Tool Misuse and Exploitation

What this means

Stock names, symbols, or currency queries may be sent to Naver Finance to retrieve prices.

Why it was flagged

The skill sends lookup requests to an external finance data source, which is expected for its purpose and does not show hidden or unrelated data transmission.

Skill content

Fetch real-time stock prices for domestic (KRX) and overseas markets using Naver Finance.

Recommendation

Avoid using the skill for private or sensitive query terms; use it for ordinary public stock, symbol, or exchange-rate lookups.