Stock Market Pro
Yahoo Finance (yfinance) powered stock analysis skill: quotes, fundamentals, ASCII trends, high-resolution charts (RSI/MACD/BB/VWAP/ATR), plus optional web a...
No comparison available
A previous version is required before a diff can be generated.
Security Scan
Status
suspicious
OpenClaw
Official security analysis
OpenClaw analysis
The skill is mostly a purpose-aligned stock research tool, but its optional options-flow path runs headless browser scraping with Chromium sandbox disabled and has under-scoped install/runtime risks users should review.
Confidence: high
VirusTotal
Type: OpenClaw Skill Name: stock-market-pro Version: 1.2.12 The skill bundle provides tools for stock market analysis, news search, and options flow data. All scripts (`ddg_search.py`, `news.py`, `options_links.py`, `uw.py`, `yf.py`) perform their stated functions using standard libraries like `yfinance`, `ddgs`, and `playwright`. There is no evidence of data exfiltration, malicious execution (e.g., `curl|bash`, `eval`), persistence mechanisms, or obfuscation. The `SKILL.md` instructions are clear and do not contain any prompt injection attempts designed to manipulate the agent into unauthorized actions. `subprocess` calls are used safely by passing arguments as lists, preventing shell injection. The use of `--no-sandbox` for Playwright is a common practice for headless browsers and not indicative of malice in this context.