← Back to Skills Marketplace
773
Downloads
2
Stars
0
Active Installs
6
Versions
Install in OpenClaw
/install massive-skill
Description
Access Massive(Polygon) stock, crypto, forex, options, indices, futures, market data, and news APIs via CLI.
Usage Guidance
This skill appears coherent for calling Massive/Polygon APIs via the 'massive' CLI, but it invokes code via 'npx' which downloads/executes the 'massive' package from npm at run time. Before using: 1) Confirm the npm package name ('massive') and publisher are legitimate (check npmjs.com and the package's repository), since the registry metadata lists no source/homepage. 2) Review the package source (or pin a specific version) rather than blindly running npx --yes. 3) Limit the MASSIVE_API_KEY scope and avoid placing it in broadly shared environments; rotate it if you suspect misuse. 4) If possible, prefer installing a vetted release or vendor-provided client rather than repeated npx fetches to reduce the risk of supply-chain changes.
Capability Analysis
Type: OpenClaw Skill
Name: massive-skill
Version: 1.0.5
The skill is classified as suspicious due to its reliance on `npx --yes massive <command>` for execution, as documented in `SKILL.md` and all `references/*.md` files. While this is a common method for running Node.js CLI tools, it introduces a supply chain risk by downloading and executing code from the npm registry without explicit auditing of the `massive` package itself. This constitutes a risky capability (shell execution of external code) without clear malicious intent from the skill's documentation, aligning with the definition of 'suspicious' rather than 'benign' or 'malicious'.
Capability Assessment
Purpose & Capability
Name/description, required binary (npx), and required env var (MASSIVE_API_KEY) align with a CLI wrapper for Massive/Polygon market data. Minor note: registry metadata lists source/homepage as unknown while SKILL.md references massive.com — verify the upstream package and publisher.
Instruction Scope
Runtime instructions are limited to invoking 'npx --yes massive <command>' and reference only API-related commands. The SKILL.md does not instruct reading unrelated files or accessing other credentials.
Install Mechanism
This is an instruction-only skill that relies on npx at runtime. npx will fetch and execute code from the npm registry on demand — expected for a CLI but a moderate operational risk if the npm package or its maintainer is untrusted.
Credentials
Only a single credential (MASSIVE_API_KEY) is required and declared as primary. No unrelated secrets, files, or config paths are requested.
Persistence & Privilege
Skill does not request persistent/always-on privileges and uses default autonomous invocation settings. It does not modify other skills or system configs.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install massive-skill - After installation, invoke the skill by name or use
/massive-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.5
- Updated CLI usage instructions to require the --yes flag with npx.
- No changes to command functionality; documentation improvements only.
v1.0.4
- Updated skill name from "polygon-api" to "massive-api" to reflect current branding.
- Changed provider references from "Polygon/Massive" to "Massive(Polygon)" throughout documentation.
- Updated required environment variable from POLY_API_KEY to MASSIVE_API_KEY.
- Adjusted metadata keys to match new environment variable and provider naming.
v1.0.3
- Switched CLI usage from Bun to npx, updating all usage examples.
- Updated required CLI dependency in metadata from "bun" to "npx".
- Removed the CLI entrypoint file cli.js.
v1.0.2
- Added metadata to SKILL.md specifying required binaries and environment variables for use.
- Declared POLY_API_KEY as the primary required environment variable.
v1.0.1
- CLI usage instructions updated for a simpler workflow; reference to JS client removed.
- Build and environment setup steps taken out of documentation.
- Description streamlined to mention CLI access only.
- No changes to commands or API coverage.
v1.0.0
- Initial release of the polygon-api skill for accessing Polygon/Massive market data.
- Provides a CLI tool and JS client for retrieving stocks, crypto, forex, options, indices, futures, market data, and news.
- Includes setup instructions for API key configuration and environment setup.
- Supports detailed command references for each financial data category.
- Outputs all command results as JSON via the CLI.
Metadata
Frequently Asked Questions
What is Massive(Polygon)?
Access Massive(Polygon) stock, crypto, forex, options, indices, futures, market data, and news APIs via CLI. It is an AI Agent Skill for Claude Code / OpenClaw, with 773 downloads so far.
How do I install Massive(Polygon)?
Run "/install massive-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Massive(Polygon) free?
Yes, Massive(Polygon) is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Massive(Polygon) support?
Massive(Polygon) is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Massive(Polygon)?
It is built and maintained by Bruce Shi (@bruce-shi); the current version is v1.0.5.
More Skills