v1.0.0

Chen China Stock Analysis

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:00 AM.

Analysis

This is a simple instruction-only stock analysis skill with no code, install step, credentials, or local data access, though its internal metadata does not match the registry metadata.

GuidanceThis skill appears safe from an artifact-security perspective. Treat its investment output as informational only, verify market data independently, and note the registry/_meta identity mismatch before installing.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityInfoConfidenceHighStatusNote

SKILL.md

Search for current price data using web search

The skill relies on web search for current market information. This is expected for stock analysis, but users should understand that results may come from external, untrusted, or stale sources.

User impactThe agent may base analysis on public web search results, so recommendations could be affected by inaccurate or outdated online data.

RecommendationVerify important price, news, and investment information against trusted financial sources before acting.

Agentic Supply Chain Vulnerabilities

SeverityLowConfidenceHighStatusNote

_meta.json

"ownerId": "kn79zf5ja86rek9c25xgqbdx9s82m81s", "slug": "china-stock-analysis"

The embedded metadata differs from the supplied registry metadata, which lists a different owner ID and slug. This is a provenance inconsistency, though there is no code or install step that would make it high impact.

User impactThe package identity is slightly inconsistent, so users may want to confirm they are installing the intended skill.

RecommendationConfirm the publisher and package identity in the registry before installation.