Stock Quote
v1.0.0Get real-time stock, ETF, and crypto prices. Compare tickers, check market cap and volume. Uses Yahoo Finance — no API key required.
⭐ 0· 75·0 current·0 all-time
byJoseph Fluckiger@josephflu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name/description match the included script: it fetches quotes from Yahoo Finance and formats them. Minor inconsistency: the registry metadata earlier listed no required binaries, but SKILL.md declares python3 as required (the script is Python). This is likely an oversight, not a functional mismatch.
Instruction Scope
SKILL.md instructs running the bundled Python script which only fetches data from Yahoo Finance and renders it locally. The runtime instructions do not direct the agent to read unrelated files, exfiltrate data, or call external endpoints beyond Yahoo Finance. The script handles errors and does not leak environment variables or credentials.
Install Mechanism
No install spec is provided (instruction-only with one script). The script lists Python dependencies (httpx, rich) in a header comment but the skill provides no automated install step. This is operationally inconvenient (it may fail if dependencies aren't present) but not an obvious security risk. No downloads from untrusted URLs are performed.
Credentials
The skill requests no environment variables, no credentials, and no config paths. That is proportionate for a read-only quote fetcher. The script makes plain HTTPS requests to Yahoo Finance only.
Persistence & Privilege
The skill does not request always:true and does not attempt to modify other skills or system-wide settings. Autonomous invocation is allowed by default (normal for skills) but is not combined with concerning privileges.
Assessment
This skill appears to be what it claims: a local Python script that fetches quotes from Yahoo Finance and prints them. Before installing, confirm you have Python 3 and install the listed Python packages (httpx, rich) in a controlled environment. Note the minor metadata mismatch: the registry entry did not list required binaries but SKILL.md requires python3. Also SKILL.md references a GitHub homepage; the registry 'Source' is unknown — if provenance matters, verify the upstream repository and review any release/install steps. Finally, because there is no install step, make sure the runner environment (the agent) has the dependencies and that you trust the agent to run arbitrary Python scripts when invoking this skill.Like a lobster shell, security has layers — review code before you run it.
latestvk970va8960hbnedprrpf3e5bts83dh43
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📈 Clawdis