by 安全扫描
OpenClaw
安全
high confidenceThe skill's requests, instructions, and manifest are consistent with an ETF signal/analysis tool that fetches public endpoints on moltstreet.com and requires only curl; nothing requested appears unrelated to its stated purpose.
评估建议
This skill is internally consistent: it will make outgoing HTTPS requests to moltstreet.com for ticker summaries and trade data and then generate AI-based signals. Consider whether you are comfortable sending any private holdings or portfolio tickers to that external service (the skill will call those endpoints). Remember the outputs are AI-generated signals, not financial advice. If you need strict privacy or enterprise compliance, verify the moltstreet.com privacy policy and traffic egress rul...详细分析 ▾
✓ 用途与能力
Name/description, manifest, and SKILL.md all describe fetching ticker summaries, paper/live trades, and related signals from moltstreet.com. Requiring curl and no credentials matches the declared functionality.
✓ 指令范围
Runtime instructions only tell the agent to curl specific moltstreet.com API endpoints for tickers and trades and to analyze those responses. There are no directives to read local files, access unrelated environment variables, or exfiltrate data to unexpected endpoints.
✓ 安装机制
This is an instruction-only skill with no install spec and no code files. That minimizes on-disk risk; the only runtime requirement is curl, which the SKILL.md uses directly.
✓ 凭证需求
No environment variables, credentials, or config paths are requested. The manifest explicitly marks API auth as not required, consistent with the 'Free, no API key' claim.
✓ 持久化与权限
The skill does not request always:true or other elevated persistent privileges. It can be invoked by the agent (default), which is normal for skills; it does not modify other skills or system-wide configs.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/12
v1.0.1: Fix dead /etf/ endpoints — now uses /ticker-summary/, /paper-trades, /trades/live for live portfolio data
● 无害
安装命令
点击复制官方npx clawhub@latest install moltstreet-portfolio
镜像加速npx clawhub@latest install moltstreet-portfolio --registry https://cn.longxiaskill.com