v1.0.0

Skills of HK-share data released by ft.tech.

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:17 AM.

Analysis

This appears to be a coherent Hong Kong market-data skill that runs bundled Python scripts to query the disclosed market.ft.tech API, with no evidence of credential use, persistence, destructive actions, or hidden data handling.

GuidanceBefore installing, confirm you are comfortable with stock lookup requests being sent to market.ft.tech and with the limited provenance metadata. The artifacts otherwise show a narrow, read-only market-data skill with no credentials or persistence.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityLowConfidenceHighStatusNote

SKILL.md

所有接口均以 `https://market.ft.tech` 为基础域名，本技能集子 skill 无需额外请求头。

The skill is designed to make external API requests to market.ft.tech. This is disclosed and purpose-aligned, but users should understand that their stock-query parameters are sent to that service.

User impactWhen used, the stock code, date range, and pagination parameters in the query may be sent to market.ft.tech.

RecommendationUse the skill for ordinary market-data lookups and avoid placing unrelated sensitive information in stock-code or date parameters.

Agentic Supply Chain Vulnerabilities

SeverityInfoConfidenceHighStatusNote

metadata

Source: unknown
Homepage: none

The registry metadata does not provide an upstream source or homepage. The included code is small and self-contained, so this is a provenance note rather than a behavioral concern.

User impactUsers have less external provenance information to verify who maintains the skill or where updates originate.

RecommendationReview the bundled source and install only if you trust the publisher and the disclosed market.ft.tech integration.