Tearsheet Generator

PassAudited by ClawScan on May 1, 2026.

Overview

The skill appears focused on generating local trading-performance reports, with notable but disclosed reliance on local Python execution and a user-specific external script path.

This appears suitable for local tearsheet/report generation, but verify the referenced Python path and dependencies before use. Treat generated HTML/JSON reports as potentially sensitive because they may include full trade lists and strategy configuration details.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If that local path contains unexpected or modified code, the report-generation workflow could run code the user did not review.

Why it was flagged

The main generator is imported from a user-specific local path outside the supplied skill package, so the behavior depends on local code whose provenance is not shown in the artifacts.

Skill content
sys.path.insert(0, '/Users/DanBot/Desktop/dev/Backtests')
from backtesting.tearsheets.strategy_comparison_tearsheet import StrategyComparisonTearsheet
Recommendation

Before using the skill, confirm the referenced local path and Python module are trusted, keep dependencies pinned where possible, and update the path only to reviewed code.

What this means

Using the skill may involve running local Python/backtest commands and writing report files on the machine.

Why it was flagged

The skill is allowed to run shell commands and read/write files, which is expected for generating Python-based reports but still gives it local execution capability.

Skill content
allowed-tools: Read, Write, Edit, Bash, Glob
Recommendation

Invoke it only on trusted trade/config files, review commands before running them, and direct outputs to a known working directory.