ClawHub

CEORater

v1.0.9

Get institutional-grade CEO performance analytics for S&P 500 companies. Proprietary scores: CEORaterScore (composite), AlphaScore (market outperformance), R...

⭐ 6· 2.7k·3 current·3 all-time
byCEORater clawhub skills@ceorater-skills
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description advertise CEO analytics via the CEORater API and the skill only requires a single CEORATER_API_KEY to call api.ceorater.com endpoints. No unrelated services, binaries, or config paths are requested.
✓
Instruction Scope
SKILL.md instructs the agent to call documented API endpoints (GET /v1/ceo, /v1/search, /v1/ceos, /v1/meta) and to use the CEORATER_API_KEY. The helper script calls only the api.ceorater.com domain, sanitizes input, URL-encodes queries, and enforces simple validation. There are no instructions to read unrelated files, system credentials, or send data to unexpected endpoints.
✓
Install Mechanism
This is instruction-only (no installer). The repo contains a small helper shell script; there is no network-download install step or use of third-party package registries. Risk from installation is low.
✓
Credentials
Only one environment variable (CEORATER_API_KEY) is required and it directly maps to the service being integrated. README notes an alternate config key in openclaw.json (apiKey) which is consistent with storing credentials locally; no other secrets or unrelated credentials are requested.
✓
Persistence & Privilege
The skill is not always-enabled (always:false) and registry shows disable-model-invocation:true (model cannot autonomously invoke it), limiting autonomous access. The skill does not request changes to other skills or system-wide config beyond optional local API-key configuration.
Assessment
This skill appears to do only what it claims: call the CEORater API using your CEORATER_API_KEY. Before installing, confirm you trust https://www.ceorater.com and your subscription, and avoid placing the API key in world-readable files. Keep the key secret (use environment variables or secure per-agent config), monitor usage/rate limits, and review the CEORater terms for allowed data use (enterprise restrictions on model training are noted). The helper script sanitizes input and only contacts api.ceorater.com, but remember that any skill that calls external APIs transmits queries and receives data — if you have sensitive prompts or PII, avoid sending them to third-party services.

Like a lobster shell, security has layers — review code before you run it.

latestvk97c9kt4ppg0rmhwx1krsy7g8d81e6rh

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvCEORATER_API_KEY
Primary envCEORATER_API_KEY

Comments