openclaw-stock-skill
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a legitimate stock data interface for the
data.diemeng.chatAPI. - [EXTERNAL_DOWNLOADS]: The skill communicates with
data.diemeng.chatto fetch financial data. This is documented as its primary function and is necessary for the skill to operate. - [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The skill follows security best practices by requesting users to provide their own API key via environment variables (
STOCK_API_KEY) or a localconfig.jsonfile. - [PROMPT_INJECTION]: No malicious prompt injection or behavior override patterns were detected. Instructional language is focused on providing operational guidance and configuration steps.
- [COMMAND_EXECUTION]: No arbitrary command execution or shell spawning was found. File system and network operations are restricted to expected behaviors, such as reading a local configuration file and making HTTP requests using the
requestslibrary.
Audit Metadata