FireAnt Stock Checker

Automated Vietnamese stock price and index checking on FireAnt.vn. Use when checking current stock prices, market indices, trading volumes, or financial info...

This skill appears to do what it says (browse FireAnt and parse stock data), but it calls an external 'openclaw' CLI that the metadata does not declare or install. Before installing or running: (1) Confirm whether your environment includes a trusted 'openclaw' binary and understand what that binary does (source, permissions, network access). (2) If you don't have openclaw, ask the author for installation instructions or a reputable repository/homepage. (3) Consider running the script in a sandboxed environment first — it automates a browser via subprocess calls, so a malicious or compromised OpenClaw binary could perform unintended actions. (4) If you need higher assurance, request an author/homepage or review the OpenClaw client implementation; lack of author/homepage and undeclared dependencies lowers trust.

Type: OpenClaw Skill Name: vietstock Version: 1.1.0 The skill is classified as suspicious due to the direct embedding of user-provided stock symbols into URLs and search queries within browser automation commands in `scripts/check_stock.py`. While intended for legitimate navigation to FireAnt.vn, this pattern introduces a vulnerability for potential browser-based injection attacks (e.g., cross-site scripting or URL manipulation) if the underlying OpenClaw browser environment or the target websites do not adequately sanitize or validate the user input. There is no evidence of intentional malicious behavior such as data exfiltration or unauthorized system access, but the presence of this exploitable capability warrants a 'suspicious' classification.