ApeWisdom Reddit Scanner
v1.0.0Scan Reddit for trending stocks and sentiment spikes using the ApeWisdom API (free). Use this to find "meme stocks", retail momentum, and sentiment shifts on r/wallstreetbets.
⭐ 3· 2.9k·8 current·8 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description claim (scan Reddit for trending tickers via the ApeWisdom API) matches the code: the script issues GET requests to https://apewisdom.io/api/v1.0/filter/<filter>. There are no unrelated credentials, binaries, or config paths requested.
Instruction Scope
SKILL.md instructs running the included Python script and documents filter/sort options only — it does not instruct reading other files, env vars, or sending data to unexpected endpoints. Note: the instructions assume a relative path (skills/apewisdom/scripts/scan_reddit.py) and do not mention the runtime dependency on Python or the 'requests' package; running the script as-is will fail if Python or required packages are missing.
Install Mechanism
There is no install spec (instruction-only), so nothing is written to disk by an installer. The included script performs network calls to a third-party domain (apewisdom.io) which is expected for this skill. The minor risk: the skill assumes the 'requests' Python library and a Python runtime are available but does not declare or install them.
Credentials
The skill requests no environment variables, credentials, or config paths. The actions in the code (public HTTP GET) do not require secrets, so the requested privileges are proportionate.
Persistence & Privilege
The skill does not request permanent inclusion (always:false) and does not modify system-wide settings or other skills. Autonomous invocation is allowed by default and is not by itself a concern here.
Assessment
This skill appears to do exactly what it says: call ApeWisdom's public API and print a JSON list of trending tickers. Before installing, consider: (1) confirm you trust the source — the package has no homepage and author is unknown; (2) the script requires Python and the 'requests' library but does not declare or install them — run in an environment where you control dependencies (or a sandbox); (3) the script makes outbound network requests to https://apewisdom.io — ensure outbound network access is acceptable and be aware of rate limits and privacy (you are sending no secrets, but usage is visible to that third party); (4) if you intend to act on trading signals, treat outputs as informational only and verify independently. If you want higher assurance, review the script yourself or run it in an isolated container before granting it to an agent.Like a lobster shell, security has layers — review code before you run it.
latestvk97ab4mneh2wnphcwa2xvwj48h804kfx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.