Valuation Calculator
v1.1.0Fast stock valuation calculator - compute PEG, EV/EBITDA, Rule of 40, DCF and more with simple commands. Inspired by YouTube tutorial and Day1Global Tech Ear...
⭐ 0· 555·5 current·5 all-time
by@arbiger
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (valuation metrics, DCF, PEG, EV/EBITDA) align with the included Python implementation which uses yfinance to fetch market/financial data. Minor inconsistency: the code inserts '~/.openclaw/workspace' onto sys.path even though the skill is self-contained and does not import local modules—this is unnecessary for the stated purpose and expands the import surface.
Instruction Scope
SKILL.md instructs reading holdings from ~/.openclaw/workspace/holdings.md which is coherent with the 'value' command, but that file path is not declared in the skill metadata as a required config path. Besides reading that holdings file and using yfinance, the instructions/code do not attempt to read other system files or env vars.
Install Mechanism
No install spec is provided (instruction-only with a code file). The code depends on the public 'yfinance' package; the script prints a message asking the user to pip install it if missing. No downloads from arbitrary URLs or archive extraction are present.
Credentials
The skill requests no environment variables, no credentials, and the runtime code does not access secrets or unrelated environment variables. Network access to Yahoo Finance via yfinance is expected and proportional to the function.
Persistence & Privilege
The skill does not request always:true and does not modify other skills. However, it prepends the user's workspace (~/.openclaw/workspace) to sys.path at runtime which can cause Python imports to resolve to user workspace modules—this increases the risk if untrusted code exists there (even though the shipped script itself does not import additional local modules).
Assessment
This skill is internally consistent with its stated purpose (it fetches data from Yahoo via yfinance and computes valuation metrics). Before installing or running it: 1) Review or back up ~/.openclaw/workspace/holdings.md if you keep private data there (the skill reads that file by default). 2) Note the script prepends ~/.openclaw/workspace to Python's import path—ensure that directory does not contain untrusted Python modules that could be accidentally imported. 3) yfinance will access Yahoo Finance over the network; ensure network access policies are acceptable. 4) If you prefer, run the script in a sandbox or inspect/modify the code to remove the sys.path insertion and to explicitly control the holdings file path. No credentials or external endpoints beyond Yahoo Finance were found.Like a lobster shell, security has layers — review code before you run it.
latestvk97145qp2cfperefk34kyx9dh58263ex
License
MIT-0
Free to use, modify, and redistribute. No attribution required.