Strykr Prism

Real-time financial data API for AI agents. Stocks, crypto, forex, ETFs. 120+ endpoints. Alternative to Alpha Vantage, CoinGecko. Works with Claude, Cursor.

Before installing, verify the upstream service and credential handling: 1) Confirm the upstream project's homepage/repository and that the GitHub repo in skill.json actually exists and is maintained; the package currently has no authoritative homepage. 2) Ask the maintainer how PRISM_API_KEY is transmitted (Authorization header, query param, or not at all). Do not export/send secrets until you understand where they go. 3) Expect the helper script to require curl and jq; ensure those binaries are present or documented. 4) Remember this skill sends user-supplied identifiers (symbols, wallet addresses, queries) to an external third-party endpoint — only use it with non-sensitive data or when you trust the operator. 5) If you need higher assurance, request signed releases, an official domain/terms/privacy policy, or run your own audited gateway rather than relying on the railway.app endpoint. Given the mismatches in metadata and missing credential usage, proceed only after resolving these questions.

Type: OpenClaw Skill Name: strykr-prism Version: 1.1.2 The skill bundle is benign. All files consistently define and interact with a financial data API hosted at `https://strykr-prism.up.railway.app`. The `SKILL.md` provides clear instructions for an AI agent to use this API, and the `scripts/prism.sh` helper script exclusively uses `curl` to query this specific endpoint. There is no evidence of data exfiltration, malicious execution (e.g., `curl|bash`), persistence mechanisms, or prompt injection attempts against the agent. The skill properly requests an API key via environment variable (`PRISM_API_KEY`) as a configuration item, which is a standard and secure practice.