funda-data

SUSPICIOUS. The core market-data functionality is broadly consistent with the stated purpose and does not install code, but the skill reads raw API secrets from .env files and includes a Funda-hosted Claude proxy that routes user prompts through the vendor rather than official model endpoints. Risk is medium: not confirmed malicious, but the proxy and credential-handling scope exceed a minimal financial-data client.