Financial Research

Use this skill any time the user wants financial analysis, earnings research, or investment-related reports. This includes: earnings call summaries, quarterl...

Security Scan

The skill's requirements (AnyGen CLI + ANYGEN_API_KEY) and runtime instructions match its stated purpose (financial research); the main risks are installing an npm CLI and sending potentially sensitive financial data to AnyGen's servers, and the package/source lacks a public homepage for independent verification.

Purpose & Capability

Name/description ask for financial analysis and the skill requires the AnyGen CLI and an AnyGen API key — these are directly related to the declared purpose.

Instruction Scope

SKILL.md only instructs use of the anygen CLI (auth and generate) and to install a related anygen-workflow-generate skill if missing. It does not request unrelated files or extra environment variables, but installing the additional skill could expand what is run.

Install Mechanism

Install is an npm package (@anygen/cli) that creates the anygen binary — this is expected for a CLI-based skill but npm packages may execute scripts at install time and introduce third-party code on the host. The install source is not a direct URL download, which is preferable, but there is no homepage or external verification provided in the registry metadata.

Credentials

Only ANYGEN_API_KEY is required and is declared as the primary credential — that is proportionate. However, the API key is sensitive and grants the skill/network access to AnyGen; any data sent to the service (financial documents, model inputs) will be exposed to that provider.

Persistence & Privilege

always is false and the skill does not request system-wide config changes or other skills' credentials. Autonomous invocation is allowed (default) — not flagged by itself but increases blast radius if the skill were malicious.

Assessment

This skill appears coherent for financial research, but before installing: 1) Verify the @anygen/cli npm package and the AnyGen service (look up the npm page, author, and anygen.io) since the registry entry has no homepage; 2) Treat ANYGEN_API_KEY as sensitive — consider using a scoped or short-lived key and confirm what data AnyGen will retain or log; 3) Be aware npm installs can run code during install and the skill may prompt you to install an additional anygen skill which widens the attack surface; 4) If you need stronger assurance, review the @anygen/cli package source or run it in a sandbox/VM first. If you cannot verify the package/provider, consider using a trusted alternative or manual workflows instead.

AI Financial Research — AnyGen

This skill uses the AnyGen CLI to generate financial analysis and earnings research reports server-side at www.anygen.io.

Authentication

# Web login (opens browser, auto-configures key)
anygen auth login --no-wait

# Direct API key
anygen auth login --api-key sk-xxx

# Or set env var
export ANYGEN_API_KEY=sk-xxx

When any command fails with an auth error, run anygen auth login --no-wait and ask the user to complete browser authorization. Retry after login succeeds.

How to use

Follow the anygen-workflow-generate skill with operation type finance.

If the anygen-workflow-generate skill is not available, install it first:

anygen skill install --platform <openclaw|claude-code> -y