Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Pipeworx Fintech Analyst

v1.0.0

Provides comprehensive fintech company and bank financial analysis using SEC filings, CFPB complaints, FDIC data, and market snapshots.

0· 61·0 current·0 all-time
byBruce Gutman@brucegutman

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for brucegutman/pipeworx-fintech-analyst.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Pipeworx Fintech Analyst" (brucegutman/pipeworx-fintech-analyst) from ClawHub.
Skill page: https://clawhub.ai/brucegutman/pipeworx-fintech-analyst
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install pipeworx-fintech-analyst

ClawHub CLI

Package manager switcher

npx clawhub@latest install pipeworx-fintech-analyst
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description, tool names, and listed data sources (EDGAR, CFPB, FDIC, market data) are consistent with a fintech analysis skill. However, the SKILL.md points to an external MCP gateway (https://gateway.pipeworx.io/mcp?task=fintech%20analysis) instead of directly calling public APIs; that is a design choice that should be justified (who runs the gateway, what data is sent to it). The mention of AlphaVantage and FRED without required credentials is plausible if the gateway proxies those services, but the lack of transparency is notable.
!
Instruction Scope
SKILL.md is instruction-only and includes a config snippet that registers an external MCP server. That means runtime behavior will route queries and possibly user data to gateway.pipeworx.io. The file does not define what data is forwarded, how errors are handled, or any privacy/usage terms. Tool descriptions are truncated/incomplete in places and reference 'ask_pipeworx' without defining it. There are no explicit instructions to read local files or env vars, but the implicit external network calls create a data-exfiltration risk if sensitive context is included in queries.
Install Mechanism
No install spec and no code files — instruction-only skill. This minimizes disk persistence and local code execution risk.
Credentials
The skill requests no environment variables or credentials, which is coherent only if the external gateway handles any upstream API keys. If the gateway requires or uses its own credentials, that is not documented. The lack of required credentials could be acceptable, but you should confirm where API keys (e.g., AlphaVantage) are hosted and whether any of your data or queries will be logged by the gateway.
Persistence & Privilege
always is false and the skill is user-invocable. It does not request permanent agent-wide privileges or modify other skills. It does encourage use of 'remember/recall' which would store intermediate findings in agent memory — consider whether you want those saved.
What to consider before installing
This skill looks like a wrapper that routes fintech queries through an external service (gateway.pipeworx.io). Before installing, ask the publisher these questions: (1) Who operates gateway.pipeworx.io and where is data logged/stored? (2) Does the gateway proxy external APIs (AlphaVantage/FRED) and hold API keys on your behalf? (3) What user data (prompts, context, memory) is sent to the gateway and how long is it retained? If you proceed, test with non-sensitive queries first, avoid including secrets or proprietary documents in prompts, and consider disabling or clearing agent memory (remember/recall) for this skill until you have clear privacy/security terms.

Like a lobster shell, security has layers — review code before you run it.

latestvk97bgqnc9w3ahkg5yq0bk1n44d85bpqj
61downloads
0stars
1versions
Updated 5d ago
v1.0.0
MIT-0

Pipeworx Fintech Analyst

FinTech Intel MCP — Compound tools that chain SEC, CFPB, FDIC,

Setup

{
  "mcpServers": {
    "fintech-intel": {
      "url": "https://gateway.pipeworx.io/mcp?task=fintech%20analysis"
    }
  }
}

Compound tools (start here)

These combine multiple data sources into one call:

ToolDescription
fintech_company_deep_diveComplete company financial analysis in one call — SEC filings (10-K), stock quote, company overview,
fintech_bank_health_checkBank health assessment — FDIC institution lookup, financials, recent industry failures, consumer com
fintech_market_snapshotFinancial market conditions dashboard — CFPB complaint trends, FDIC banking industry summary, and op

Individual tools

For granular queries, these are also available:

ToolDescription
edgar_search_filingsFull-text search across all SEC EDGAR filings. Search by keyword, company name, or topic. Optionally
edgar_company_filingsGet recent SEC filings for a specific company. Accepts a ticker symbol or CIK number. Optionally fil
edgar_company_factsGet structured XBRL financial data for a company by CIK. Returns key financial metrics like revenue,
edgar_company_conceptGet a specific financial metric over time for a company. Returns all reported values across filings
edgar_ticker_to_cikLook up a company CIK number from its ticker symbol. The CIK is needed for other EDGAR tools.
cfpb_search_complaintsSearch the CFPB consumer complaint database. Filter by keyword, company, product category, and date
cfpb_company_complaintsGet recent consumer complaints for a specific company, sorted by newest first. Returns complaint det
cfpb_get_complaintGet full details for a single consumer complaint by its complaint ID number.
cfpb_top_companiesGet the companies with the most consumer complaints in a given date range. Useful for identifying wh
cfpb_product_breakdownGet complaint counts broken down by product category. Optionally filter by company and/or date range
fdic_search_institutionsSearch for FDIC-insured banks and institutions by name. Returns institution name, CERT number, city,
fdic_get_institutionGet detailed information for a specific FDIC-insured bank by its CERT (certificate) number. Returns
fdic_financialsGet financial call report data for a bank by CERT number. Returns quarterly financial metrics includ
fdic_failuresList FDIC bank failures, sorted by most recent. Optionally filter by date range. Returns bank name,
fdic_summaryGet aggregate industry summary data for all FDIC-insured institutions for a given reporting date. Re

Data sources

  • Edgar: EDGAR MCP — SEC EDGAR public APIs (free, no auth)
  • Cfpb: CFPB MCP — Consumer Financial Protection Bureau complaint database (free, no auth)
  • Fdic: FDIC MCP — FDIC BankFind Suite API (free, no auth)
  • Alphavantage: Alpha Vantage MCP — Stock market data, fundamentals, and earnings
  • Fred: FRED MCP — Federal Reserve Economic Data (St. Louis Fed)

Tips

  • Start with compound tools — they handle errors and combine data automatically
  • Use ask_pipeworx if you're unsure which tool to use
  • Use remember/recall to save intermediate findings

Comments

Loading comments...