yahooquery

Access Yahoo Finance data including real-time pricing, fundamentals, analyst estimates, options, news, and historical data via the yahooquery Python library.

This skill is essentially documentation for the yahooquery Python library and appears internally consistent. Before installing/using it: 1) ensure the runtime already has the yahooquery package (and Selenium + a webdriver if you plan to use Premium); this skill will not install those for you. 2) Only provide Yahoo Premium credentials (username/password) if you trust the environment — the docs recommend storing them in env vars (YF_USERNAME/YF_PASSWORD), so avoid plaintext files and prefer ephemeral or scoped credentials where possible. 3) Review network and browser-automation permissions: Selenium-based login automates a browser and may require a webdriver and network access to Yahoo. 4) The skill owner and source are unknown and there's no homepage; if you want greater assurance, prefer obtaining the official yahooquery package from a trusted source (PyPI or the project's GitHub) and review its code before allowing any agent to use your credentials. 5) If you do not need Premium features, avoid passing credentials to reduce risk.

Type: OpenClaw Skill Name: yahooquery Version: 1.0.0 The skill is classified as suspicious due to its explicit handling of sensitive user credentials (username and password) for Yahoo Finance Premium features, as detailed in `SKILL.md`, `references/keyword_arguments.md`, `references/research.md`, and `references/ticker/premium.md`. It also allows for the configuration of network proxies, a risky capability that could be leveraged for data exfiltration or to obscure network traffic. While these features are presented as part of the skill's legitimate functionality, they expose significant attack surface for an AI agent or a malicious user.