Stock Copilot Pro
PassAudited by ClawScan on May 10, 2026.
Overview
This appears to be a purpose-aligned stock-analysis skill, but it uses a QVeris API key, calls QVeris services, and stores local watchlist/evolution state.
Install only if you are comfortable letting the skill use your QVeris API key and send stock symbols/watchlist-related queries to qveris.ai. Keep the key scoped, review any optional cron jobs before enabling them, and remember that generated investment analysis is informational rather than a substitute for professional financial advice.
Findings (5)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Running radar or briefs can make multiple QVeris/provider API calls and consume API quota while selecting data sources automatically.
The radar command dynamically searches QVeris tools and executes the selected provider tool. This is central to the stock-radar purpose, but users should understand that the skill may call fallback tools selected from QVeris search results.
const selected = preferred || tools[0] || null; ... const raw = await executeTool(selected.tool_id, searchResult?.search_id || null, params, maxSize, timeoutMs);
Use a scoped/read-only QVeris key, review returned data-source metadata, and set limits/timeouts appropriate for your usage.
The skill can use your QVeris account/key to retrieve market, news, fundamentals, and sentiment data.
The skill needs a QVeris credential to access its market-data gateway. The credential use is disclosed and described as read-only.
credentials:
required:
- QVERIS_API_KEY
primary: QVERIS_API_KEY
scope: read-only
endpoint: https://qveris.ai/api/v1Provide only a scoped key intended for this service, rotate it if exposed, and monitor QVeris usage if quota or billing matters.
Installation may fail or behave differently if Node.js 18+ is not available, even though no external installer is required.
The skill relies on local Node.js execution while having no external installer/package manager. This is simple and disclosed, but users need a compatible local runtime.
runtime: { language: nodejs, node: ">=18" }
install: { mechanism: local-skill-execution, external_installer: false, package_manager_required: false }Confirm Node.js 18+ is installed before running the skill and review local scripts before execution.
Someone with access to the skill directory could see saved symbols/holdings, and future runs may reuse stored parameter templates.
The skill persists a local watchlist and evolution/template state. This is bounded to the skill directory, but it can retain holdings/watchlist interests and influence later parameter selection.
persistence: { writes_within_skill_dir: [config/watchlist.json, .evolution/tool-evolution.json], writes_outside_skill_dir: false }Review or delete `config/watchlist.json` and `.evolution/tool-evolution.json` when needed, and use `--no-evolution` for runs where you do not want template state reused.
If you choose to add these cron jobs, the agent may run recurring stock brief/radar tasks and deliver investment-oriented summaries without a fresh manual prompt each time.
The repository includes example scheduled agent jobs for recurring market briefs. The comment frames them as examples to add via CLI/Gateway, not as automatically installed jobs.
"schedule": { "kind": "cron", "expr": "0 9 * * 1-5", "tz": "Asia/Shanghai" }, ... "message": "Use stock-copilot-pro to generate morning brief: run brief --type morning --max-items 8 --format chat and give an actionable plan for today."Only enable scheduled jobs intentionally, verify the delivery channel, and review recommendations before making financial decisions.