Mx Search
PassAudited by ClawScan on May 1, 2026.
Overview
This is a coherent finance-search skill that sends user queries to a disclosed Meixiang API using an API key, with no evidence of hidden or destructive behavior.
This skill appears safe to use for its stated purpose. Before installing, confirm you trust the Meixiang API endpoint, configure the MX_APIKEY carefully, and avoid sending confidential or nonpublic financial information in search queries.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Finance-related queries may be sent to the Meixiang API service.
The skill directs the agent to make an external POST request with the user's query. This is purpose-aligned for a search skill, but users should notice the external data flow.
curl -X POST --location 'https://mkapi2.dfcfs.com/finskillshub/api/claw/news-search'
Avoid including confidential, nonpublic, or highly sensitive financial information in queries unless you trust the API provider.
The skill needs access to a Meixiang API key to perform searches.
The skill requires a service API key. This is expected for the Meixiang integration, but it is a credential and is not reflected in the registry metadata.
Set the API key in the environment variable `MX_APIKEY`.
Use a dedicated, least-privileged API key if available, and do not share the key in prompts or saved outputs.