Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Stock Info Explorer Jarvis

v1.2.11

A Yahoo Finance (yfinance) powered financial analysis tool. Get real-time quotes, generate high-resolution charts with moving averages + indicators (RSI/MACD...

0· 72·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for bingze00000/stock-info-explorer-jarvis.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Stock Info Explorer Jarvis" (bingze00000/stock-info-explorer-jarvis) from ClawHub.
Skill page: https://clawhub.ai/bingze00000/stock-info-explorer-jarvis
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install stock-info-explorer-jarvis

ClawHub CLI

Package manager switcher

npx clawhub@latest install stock-info-explorer-jarvis
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description match the code: the script uses yfinance, pandas, mplfinance/plotille and implements RSI/MACD/Bollinger/VWAP/ATR and chart generation. No unrelated credentials, binaries, or endpoints are requested.
Instruction Scope
SKILL.md instructs running the provided script with specific commands and flags; those commands map to functions present in the visible portion of the script. The instructions do not ask the agent to access unrelated files, env vars, or external endpoints beyond Yahoo Finance.
Install Mechanism
There is no install spec (instruction-only skill with an embedded script). The script lists reasonable Python dependencies in comments (yfinance, pandas, matplotlib, mplfinance, rich, plotille). Lack of an install step is low-risk but means environment must have these Python packages available; nothing in the install mechanism appears malicious.
Credentials
The skill declares no required environment variables, config paths, or primary credential. The visible code does not access credentials or unrelated environment secrets; it only fetches market data via yfinance and writes chart PNGs to /tmp.
Persistence & Privilege
Skill is not always-enabled and does not modify other skills or persistent agent settings. It writes PNG output to /tmp (expected for charting) and prints a CHART_PATH; no elevated privileges are requested.
What to consider before installing
The skill appears coherent with its stated purpose: it fetches data from Yahoo Finance and computes/plots indicators locally, requiring common Python plotting/data libraries. However, the provided scripts/yf.py appears truncated in the package listing (a line ends with 'parser.add_argum' and the file is cut off), so the full runtime behavior cannot be verified. Before installing or running: (1) obtain and inspect the complete yf.py source (or ask the publisher for the full file); (2) run it in an isolated environment (sandbox or container) because it executes arbitrary Python and performs network requests to Yahoo; (3) ensure required Python dependencies are installed from trusted registries; (4) verify there are no hidden uploads or telemetry in the remainder of the script—if you cannot get the full source or a verifiable checksum from a trusted homepage/owner, treat the package as untrusted.

Like a lobster shell, security has layers — review code before you run it.

latestvk97a8tpz5xa4vj76yxgysdb74n844tmf
72downloads
0stars
1versions
Updated 3w ago
v1.2.11
MIT-0

Stock Information Explorer

This skill fetches OHLCV data from Yahoo Finance via yfinance and computes technical indicators locally (no API key required).

Commands

1) Real-time Quotes (price)

uv run --script scripts/yf.py price TSLA
# shorthand
uv run --script scripts/yf.py TSLA

2) Fundamental Summary (fundamentals)

uv run --script scripts/yf.py fundamentals NVDA

3) ASCII Trend (history)

uv run --script scripts/yf.py history AAPL 6mo

4) Professional Chart (pro)

Generates a high-resolution PNG chart. By default it includes Volume and Moving Averages (MA5/20/60).

# candle (default)
uv run --script scripts/yf.py pro 000660.KS 6mo

# line
uv run --script scripts/yf.py pro 000660.KS 6mo line

Indicators (optional)

Add flags to include indicator panels/overlays.

uv run --script scripts/yf.py pro TSLA 6mo --rsi --macd --bb
uv run --script scripts/yf.py pro TSLA 6mo --vwap --atr
  • --rsi : RSI(14)
  • --macd: MACD(12,26,9)
  • --bb : Bollinger Bands(20,2)
  • --vwap: VWAP (cumulative for the selected range)
  • --atr : ATR(14)

5) One-shot Report (report) ⭐

Prints a compact text summary (price + fundamentals + indicator signals) and automatically generates a Pro chart with BB + RSI + MACD.

uv run --script scripts/yf.py report 000660.KS 6mo
# output includes: CHART_PATH:/tmp/<...>.png

Ticker Examples

  • US stocks: AAPL, NVDA, TSLA
  • KR stocks: 005930.KS, 000660.KS
  • Crypto: BTC-USD, ETH-KRW
  • Forex: USDKRW=X

Notes / Limitations

  • Indicators are computed locally from price data (Yahoo does not reliably provide precomputed indicator series).
  • Data quality may vary by ticker/market (e.g., missing volume for some symbols).

Korean note: 실시간 시세 + 펀더멘털 + 기술지표(차트/요약)까지 한 번에 처리하는 종합 주식 분석 스킬입니다.

Comments

Loading comments...