Is raufimusaddiq/stock-data-skill safe?
https://clawhub.ai/raufimusaddiq/stock-data-skill
This is a legitimate stock data fetching skill that retrieves financial information from SimplyWall.st. The code is clean with standard data fetching patterns and no malicious behavior detected. All security monitoring passed with only expected network activity to the documented financial data provider.
Category Scores
Findings (5)
LOW External HTTP requests to financial data provider -10 ▶
The skill makes legitimate HTTP requests to SimplyWall.st (216.150.1.1) to fetch stock data. This is expected behavior for a stock data skill but represents external network activity.
INFO Potential stock interest tracking -10 ▶
The skill could theoretically be used to track which stocks a user is interested in, as queries are sent to external services. However, this is inherent to the skill's legitimate functionality.
INFO External skill caution -5 ▶
As with any external skill, there is minimal inherent risk from integrating third-party code into the agent environment.
INFO Python script execution -5 ▶
The skill includes a Python script that will be executed when invoked. Code review shows standard data fetching and parsing operations with no malicious patterns.
INFO Standard installation pattern -5 ▶
Installation created expected files in designated skill directory with no anomalous behavior detected.