ClawHub

Mx Select Stock

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward stock-screening API helper that clearly sends screening requests to an external provider.

Install only if you intend to use the Meixiang stock-screening service. Use a dedicated, revocable API key, avoid putting confidential trading plans or private business information into screening keywords, and remember that requests are processed by the external API provider.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

External Transmission

Medium
Category
Data Exfiltration
Content
- `pageSize` – number of rows per page (max 100, adjust as needed)
2. **Execute the POST request**:
   ```bash
   curl -X POST \
     --location 'https://mkapi2.dfcfs.com/finskillshub/api/claw/stock-screen' \
     --header 'Content-Type: application/json' \
     --header "apikey:${MX_APIKEY}" \
Confidence
82% confidence
Finding
curl -X POST \ --location 'https://mkapi2.dfcfs.com/finskillshub/api/claw/stock-screen' \ --header 'Content-Type: application/json' \ --header "apikey:${MX_APIKEY}" \ --data '{"key

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal