mcp-us-equities-intraday

The skill's stated purpose and its core capabilities align logically with intraday market data querying. However, the installation and configuration workflow rely on unverifiable binaries downloaded via curl from an untrusted, non-registry source, combined with an HTTP endpoint for configuration. Data flows themselves are typical for market data ingestion but are contingent on trusting the external rw tool and the remote server. Overall, the footprint is coherent with its purpose but carries substantial security risks due to supply-chain and transport-layer vulnerabilities. Treat as SUSPICIOUS with high risk of credential/data exposure if the tool or endpoints are compromised; mitigate by using signed, registry-distributed tooling, enforce TLS/HTTPS for all endpoints, and restrict data access to authenticated, auditable sources.