← Back to Skills Marketplace
132
Downloads
1
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install us-stock-financials
Description
Fetch comprehensive financial data from SEC EDGAR XBRL for US-listed companies (especially Chinese ADRs). Includes balance sheet, income statement, cash flow...
Usage Guidance
This skill appears to do what it claims, but review a few things before running: 1) Inspect the full scripts (the provided listing was truncated) to confirm there is no hidden network exfiltration or unexpected behavior. 2) The code contains an explicit insecure SSL fallback that disables certificate verification; consider removing that fallback or restricting it to debugging only, because it makes network requests susceptible to MITM. 3) Do not run the 'pip3 install ... --break-system-packages' command on a system Python; instead create and use a virtualenv (python3 -m venv .venv && source .venv/bin/activate && pip install reportlab). 4) Run the script in an isolated environment (container/VM) if you are unsure, and avoid providing any unrelated credentials to the process. 5) If you plan to make many requests to SEC endpoints, consider adding a contact email per SEC access guidance and rate-limiting your requests to avoid being blocked.
Capability Analysis
Type: OpenClaw Skill
Name: us-stock-financials
Version: 1.0.0
The skill bundle provides legitimate financial data retrieval from SEC EDGAR but contains a security vulnerability in `scripts/sec_finance.py`, which implements a fallback mechanism that disables SSL certificate verification (`ssl.CERT_NONE`), exposing the agent to man-in-the-middle (MITM) attacks. Additionally, `SKILL.md` includes instructions to install dependencies using the `--break-system-packages` flag, which can compromise the integrity of the host's system-managed Python environment.
Capability Assessment
Purpose & Capability
Name/description (fetch SEC XBRL financials, generate PDFs) matches the files and behavior: a Python script that queries data.sec.gov / sec.gov, parses XBRL/company facts, and produces JSON/table/PDF output. The included issuers.json aligns with the stated focus on US-listed/Chinese ADRs.
Instruction Scope
SKILL.md simply instructs running the bundled Python script with search/period/output/pdf options — scope is limited to querying the SEC and producing local output. The script does perform network requests to data.sec.gov and www.sec.gov (expected). No instructions request reading unrelated files or environment variables. Note: the code includes a fallback SSL context that disables certificate verification on failure — this widens the network trust surface and is a security concern to review.
Install Mechanism
No install spec; instruction-only plus an included Python script. Dependency noted is reportlab (PDF). The SKILL.md suggests installing reportlab with 'pip3 install reportlab --break-system-packages', which is unusual and could be harmful on system Python — prefer a virtualenv. No remote downloads or obscure installers are present in the manifest.
Credentials
The skill requests no environment variables, credentials, or config paths. All external access is to public SEC endpoints, which is proportional to the stated purpose.
Persistence & Privilege
always:false and no install-time persistence mechanisms are present. The skill doesn't request elevated privileges or modify other skill configurations.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install us-stock-financials - After installation, invoke the skill by name or use
/us-stock-financials - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is US Stock Financials?
Fetch comprehensive financial data from SEC EDGAR XBRL for US-listed companies (especially Chinese ADRs). Includes balance sheet, income statement, cash flow... It is an AI Agent Skill for Claude Code / OpenClaw, with 132 downloads so far.
How do I install US Stock Financials?
Run "/install us-stock-financials" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is US Stock Financials free?
Yes, US Stock Financials is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does US Stock Financials support?
US Stock Financials is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created US Stock Financials?
It is built and maintained by mli-cj (@mli-cj); the current version is v1.0.0.
More Skills