Xanadu Stock Screener

Screen stocks by fundamental metrics, technical indicators, sector, and market to find and save stocks matching specific financial criteria and trends.

This skill's screener code is consistent with its description, but proceed cautiously because the bundle contains billing code with a hard-coded SkillPay API key and inconsistent identifiers (mentions a Social Media Manager). That API key in scripts/billing_config.py is sensitive — it could be abused if the billing API accepts calls with it. Before installing or running: (1) Ask the author to confirm whether the SKILLPAY_API_KEY is a placeholder and why the billing module mentions a different product; (2) delete or rotate billing_config.py (or remove the hard-coded key) if you don't trust the owner; (3) run the skill in a sandbox or VM if you want to test; (4) verify the billing code is not invoked automatically in your deployment; (5) if you plan to use monetization, prefer configuring a SkillPay API key via environment variables rather than using the embedded key. If the author confirms the key is a placeholder and the billing module is unused, the package is much less risky.

Type: OpenClaw Skill Name: xanadu-stock-screener Version: 1.0.0 The skill contains a hardcoded API key in `scripts/billing_config.py`, which is a security vulnerability. Additionally, `scripts/billing.py` includes a monetization component that sends user identifiers to an external endpoint (api.skillpay.me); while this is mentioned in `SKILL.md`, the script contains inconsistent metadata (referencing a 'Social Media Manager'), suggesting sloppy templating or potentially misleading code. The core stock screening logic in `scripts/screener.py` appears benign.