Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

FireAnt Stock Checker

v1.1.0

Automated Vietnamese stock price and index checking on FireAnt.vn. Use when checking current stock prices, market indices, trading volumes, or financial info...

0· 1.8k·2 current·2 all-time
byLoc Vo@aholake
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill name/description (FireAnt stock checker) align with the included script which scrapes FireAnt.vn. However the script requires an external 'openclaw' command-line tool (used for browser automation) but the registry metadata and SKILL.md declare no required binaries or install steps. That undeclared dependency is an incoherence: a user would need the 'openclaw' binary for the skill to work, and its presence/behavior affects security.
Instruction Scope
The runtime instructions and the script stay within the stated purpose: they automate a browser to load Google/FireAnt pages, take snapshots, and parse page content for stock/index data. The script does not access unrelated files or environment variables, nor does it transmit extracted data to any third-party endpoint beyond browsing FireAnt/Google via the OpenClaw client.
Install Mechanism
There is no install spec (lowest-risk pattern) and the skill only includes a Python script. However the script executes an external binary ('openclaw') via subprocess; that binary is not provided or declared. Because the skill relies on an external tool that would be present on the host, the install footprint is small but the undeclared external dependency is noteworthy.
Credentials
The skill requests no environment variables, credentials, or config paths. The script runs subprocesses but does not attempt to read secrets or other environment variables. No unnecessary credential access is requested.
Persistence & Privilege
The skill is not forced-always and does not modify other skills or system configs. It can be invoked autonomously (disable-model-invocation=false), which is the platform default; combined with the other issues this is not itself a new concern.
What to consider before installing
This skill appears to do what it says (browse FireAnt and parse stock data), but it calls an external 'openclaw' CLI that the metadata does not declare or install. Before installing or running: (1) Confirm whether your environment includes a trusted 'openclaw' binary and understand what that binary does (source, permissions, network access). (2) If you don't have openclaw, ask the author for installation instructions or a reputable repository/homepage. (3) Consider running the script in a sandboxed environment first — it automates a browser via subprocess calls, so a malicious or compromised OpenClaw binary could perform unintended actions. (4) If you need higher assurance, request an author/homepage or review the OpenClaw client implementation; lack of author/homepage and undeclared dependencies lowers trust.

Like a lobster shell, security has layers — review code before you run it.

latestvk9727fp4m3zarhh948w8e2qf1d8193sa
1.8kdownloads
0stars
2versions
Updated 10h ago
v1.1.0
MIT-0

FireAnt Stock Price Checker

Overview

Automatically retrieves real-time stock information from FireAnt.vn for Vietnamese equities. Handles the full workflow from searching to data extraction and formatting.

Quick Start

Check a single stock:

scripts/check_stock.py DPM

Check multiple stocks:

scripts/check_stock.py VCB FPT BID

Core Workflow

  1. Search - Uses Google search to find the FireAnt stock page for the symbol
  2. Navigate - Opens the FireAnt stock page via browser automation
  3. Extract - Parses current price, volume, market cap, and key statistics
  4. Format - Returns structured data in readable format

Supported Data

For Stocks:

  • Current Price - Real-time price with change percentage
  • Trading Data - Volume, value, opening/high/low prices
  • Market Metrics - Market cap, beta, P/E ratio, reference price
  • Technical Analysis - Moving averages (MA10, MA50)
  • Company Info - Full company name, stock exchange listing

For Indices (VNINDEX, HNX30, VN30, etc.):

  • Current Index - Real-time index value with change percentage
  • Trading Data - Total volume, matched volume, value traded
  • Foreign Trading - NĐTNN (foreign investor) buy/sell activity and net position
  • Technical Analysis - Moving averages (MA10, MA50)
  • Market Overview - Reference price, opening, high/low range

Usage Patterns

Single stock inquiry: "Check giá cổ phiếu DPM" "What's the current price of VCB?"

Multiple stocks: "Compare VCB, BID, and CTG prices" "Show me bank stocks: VCB BID CTG"

Market indices: "Check VNINDEX" "How is the market doing today?" (→ VNINDEX) "Show me VN30 index"

Mixed (stocks + index): "Check ACB, L18, AAA và VNINDEX" "Give me tech stocks and market index: FPT VNM VNINDEX"

Market research: "Find information about DPM stock on FireAnt" "Get latest trading data for FPT"

Scripts

scripts/check_stock.py

Main script that automates the full stock checking workflow for one or more symbols (stocks or indices).

Usage: python3 scripts/check_stock.py <SYMBOL1> [SYMBOL2] ...

Examples:

# Check stocks
python3 scripts/check_stock.py ACB VCB FPT

# Check index
python3 scripts/check_stock.py VNINDEX

# Check mixed
python3 scripts/check_stock.py ACB L18 AAA VNINDEX

Returns: Formatted stock/index data including price/index value, volume, and key metrics.

Note: FireAnt URL format is the same for both stocks and indices: https://fireant.vn/ma-chung-khoan/{SYMBOL}

Comments

Loading comments...