Skills/ClawHub/company-kpi-tracker

company-kpi-tracker@1.2.0

VERIFIED

Publisher claims: "Track company KPIs from earnings filings: segment and product revenue, deliveries, subscribers, unit sales and non-GAAP operating metrics. Show the latest reported fiscal period, filing citation, quarter-over-quarter and year-over-year changes, preliminary values and discontinued histories. Discover covered companies and available series, compare compatible metrics across a watchlist, and prepare the numbers to watch before earnings. Use for company KPIs, segment revenue, operating metrics, key metrics, non-GAAP metrics, iPhone revenue, AWS revenue, Tesla deliveries, subscriber counts, unit sales by quarter, KPI API, quarterly KPI growth, compare cloud revenue. Free discovers coverage and series and returns full history for sample companies such as Tesla and Microsoft; other companies' numbers require PRO. Read-only. No trading, no purchases, no write operations, no wallet access." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher thesentitrader · joined 13 days agoInstalls 498Last detonated 53 min ago
$clawhub install company-kpi-tracker
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-04 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
URL with embedded credentialsscripts/test_kpi_table.py:541 · URL with embedded credentials — may be phishing or credential leakingFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST07

No other findings across 2,014 lines in 3 files.

company-kpi-tracker@1.2.0 safety verdict: Verified 88/100 — KillerSkills