AlphaLens API
v1.0.21Use this skill whenever the user wants to discover companies, search for products, build market maps, manage pipelines, or run enrichment workflows using Alp...
⭐ 0· 205·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, declared env var (ALPHALENS_API_KEY), and the SKILL.md all align: the skill is an instruction-only integration that issues HTTP requests to the AlphaLens API and produces market maps, investor networks, and benchmarks. No unrelated credentials, binaries, or install steps are requested.
Instruction Scope
Runtime instructions are explicit curl calls to the AlphaLens API, creation of temporary workdirs, and generation of self-contained HTML (favicons are fetched and base64-encoded). The skill instructs the agent to only fetch favicons for public domains returned by AlphaLens and to sanitize domain values before using them in shell commands. Two practical notes: (1) the parallel curl fan-out pattern will generate many outbound HTTP requests and can quickly consume AlphaLens credits if run at scale (the SKILL.md does warn about credit usage); (2) fetching favicons via a third-party service (t0.gstatic.com) will reveal the requested domains to that service — the skill documents this behavior, but users should be aware of the data leak to the favicon provider. There are no instructions to read local files or unrelated environment variables.
Install Mechanism
Instruction-only skill with no install spec or code files to write to disk. Lowest-risk installation model (nothing is downloaded or executed beyond normal HTTP calls initiated at runtime).
Credentials
Only one secret is required (ALPHALENS_API_KEY), which matches the declared primary credential and the documented API-key header used in all curl examples. No other secrets, config paths, or unrelated env vars are requested.
Persistence & Privilege
always is false (not force-included) and the skill does not request persistent system-level privileges or attempt to modify other skills. Autonomous invocation is allowed by default (normal for skills) and the skill does not request elevated privileges.
Assessment
This skill is coherent with its stated purpose: it only needs an AlphaLens API key and issues HTTP requests to AlphaLens to build market maps, networks, and benchmarks. Before installing, confirm you have a legitimate AlphaLens subscription and are willing to expose the API key to the agent runtime. Be aware the workflows run many parallel curl requests (fan-out), which can quickly consume AlphaLens credits — the SKILL.md warns about typical credit usage. The skill fetches favicons via a Google favicon endpoint (t0.gstatic.com) and base64-encodes them into the HTML; that means the favicon provider will see the domains requested. If you are concerned about leaking internal/private hostnames, avoid passing such domains to the skill (the docs explicitly instruct to only fetch public domains returned by AlphaLens). Recommend testing on a small dataset first, limit the number of parallel calls, and rotate or scope the API key per your organization’s credential policy.Like a lobster shell, security has layers — review code before you run it.
latestvk971th07smmrdtbd6ctb4t7t4s84epnf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
EnvALPHALENS_API_KEY
Primary envALPHALENS_API_KEY