ClawHub

Yahoo Finance CLI

v1.0.0

This skill should be used when the user asks to "get stock prices", "check stock quotes", "look up earnings", "get financial data", "find trending stocks", or needs stock market data from Yahoo Finance.

⭐ 8· 6k·39 current·41 all-time
by@stuhorsman
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description request stock and finance data from Yahoo Finance and the SKILL.md only asks for the yahoo-finance2 CLI ('yf') and jq for JSON processing — these are directly relevant.
✓
Instruction Scope
Runtime instructions only describe running the yf CLI, piping JSON to jq, and troubleshooting a cookie file (~/.yf2-cookies.json). The instructions do not read unrelated files, access unrelated env vars, or send data to unexpected endpoints.
ℹ
Install Mechanism
Install steps are npm install of the public 'yahoo-finance2' package and brew install jq, plus linking a global binary into /usr/local/bin. This is expected for a CLI-based skill but carries the usual npm hygiene concerns (review package source, trustworthiness, and privileges required for global install / linking).
✓
Credentials
The skill declares no required env vars or credentials. The only persisted artifact is a cookie file in the user's home (~/.yf2-cookies.json), which is reasonable for a CLI that manages cookies for web requests.
ℹ
Persistence & Privilege
The skill is instruction-only, not always-enabled, and requests no credentials. However, disableModelInvocation is not set (default model-invocable), so the agent could invoke the skill autonomously if the platform allows model-initiated skill calls — this is normal but worth noting.
Assessment
This skill appears to do what it says: run the yahoo-finance2 CLI and parse JSON with jq. Before installing, review the yahoo-finance2 npm package (its npm page and source) to ensure you trust it, and prefer local-user npm installs (avoid sudo/global installs) if you want less system impact. Be aware the CLI stores cookies in ~/.yf2-cookies.json — inspect or remove that file if you have privacy concerns. Finally, if you don't want the agent to call the skill autonomously, check your platform's skill invocation settings (disable model invocation) before enabling it.

Like a lobster shell, security has layers — review code before you run it.

latestvk97e78fqaycgrcvda1zj8255358042mb

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binsjq, yf

Install

Install jq (Homebrew)
Bins: jq
Install Yahoo Finance CLI (npm)
Bins: yahoo-finance
npm i -g yahoo-finance2

Comments