ClawHub

Institutional Flow Tracker

v0.1.0

Use this skill to track institutional investor ownership changes and portfolio flows using 13F filings data. Analyzes hedge funds, mutual funds, and other institutional holders to identify stocks with significant smart money accumulation or distribution. Helps discover stocks before major moves by following where sophisticated investors are deploying capital.

⭐ 5· 3.3k·18 current·18 all-time
byVeera@veeramanikandanr48
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
ℹ
Purpose & Capability
Name/description, SKILL.md, README, and scripts consistently describe fetching 13F/holder data from Financial Modeling Prep (FMP) and analyzing institutional flows. The requested functionality (screening, per-stock analysis, tracking by CIK) aligns with the code and docs. However, registry metadata lists no required environment variables while the SKILL.md and scripts explicitly require an FMP_API_KEY — a metadata omission that reduces transparency.
✓
Instruction Scope
Runtime instructions and scripts focus on calling FMP API endpoints and producing local analysis reports. The SKILL.md tells the agent to run included Python scripts and pass or set an API key. There are no instructions to read unrelated system files, modify other skills, or transmit data to unexpected third-party endpoints beyond financialmodelingprep.com and SEC links.
✓
Install Mechanism
No install spec is provided (instruction-only), which means nothing is automatically downloaded or written by an installer. The code files are included in the skill; scripts rely only on Python and the requests library. This is low-risk compared with arbitrary remote downloads, but running bundled scripts still executes code on your system.
!
Credentials
The skill legitimately requires a single external API credential (FMP_API_KEY) to function, and the scripts accept a CLI argument or env var. However, the registry metadata declares no required env vars or primary credential, creating a mismatch that could cause users to miss that they must supply a third-party API key. No other unrelated credentials or elevated access are requested.
✓
Persistence & Privilege
always is false and the skill does not request persistent system privileges or claim to modify other skills or global agent settings. The agent can invoke it autonomously (platform default), which is expected for skills and not flagged alone.
What to consider before installing
This skill appears to do what it says: call FMP API endpoints and analyze 13F/institutional-holder data. Before using it: - Confirm the missing metadata: the registry incorrectly lists no required env vars even though SKILL.md and scripts require FMP_API_KEY. Treat that as an administrative/quality issue. - Inspect the included scripts yourself (they are plain Python) or run them in an isolated environment (VM or container) before trusting them on a production machine. - Only provide a limited FMP API key (no other secrets). Do not supply AWS/GitHub/other credentials — the skill does not need them. - Verify network endpoints the scripts call (they appear to use financialmodelingprep.com). If you want extra safety, run them with network monitoring to confirm behavior. - Because the skill source and homepage are unknown, prefer sandboxed execution and revoke the API key if you later suspect misuse. If you want, I can (1) compare the full scripts for any hidden network calls or file-system access not visible in the truncated excerpts, or (2) produce a short checklist/command set to safely run the scripts in a container.

Like a lobster shell, security has layers — review code before you run it.

latestvk973fcx9baqqjxgbvhg12hazw5809917

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments