ClawHub

yfinance

v1.0.0

Fetch real-time price, technical, and fundamental data for international and Indonesian stocks with automatic IDX ticker suffix handling and concise summaries.

⭐ 0· 133·0 current·0 all-time
by@temmyraharjo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description promise (price, technical, fundamental data with IDX suffix handling) matches the code and SKILL.md. requirements.txt lists yfinance and pandas which are appropriate. No requests for unrelated binaries, config paths, or credentials.
✓
Instruction Scope
SKILL.md instructs use of yfinance for snapshots and history; the implementation follows that and only processes tickers and returns summaries. There are no instructions or code paths that read arbitrary files, access unrelated env vars, or transmit data to unexpected endpoints. Note: the skill will perform network requests to Yahoo Finance via yfinance (expected for its purpose).
✓
Install Mechanism
No install spec is provided (instruction-only install), but requirements.txt lists common packages (yfinance, pandas). No downloads from arbitrary URLs or archive extraction; install risk is low provided the runtime installs these public packages from PyPI.
✓
Credentials
The skill requests no environment variables, credentials, or config paths. This is proportionate to its functionality.
✓
Persistence & Privilege
always is false and the skill is user-invocable; it does not modify other skills or system settings. It does not request persistent privileges or store additional tokens.
Assessment
This skill appears coherent and limited to calling yfinance/Yahoo Finance and returning summaries. Before installing, ensure you are comfortable allowing outbound network requests to fetch market data and that your environment can install the listed Python packages (yfinance, pandas). Note SKILL.md references SOUL.md/TOOLS.md for style but those files are not included — output formatting may differ from expectations. If you need offline use or tighter supply-chain control, review/lock the package versions and inspect the skill code in your environment before granting it autonomous invocation.

Like a lobster shell, security has layers — review code before you run it.

latestvk970sgazfk61t313vy4y3mttf983w9q1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments