ETF投资助理

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a benign ETF quote and calculator helper, with only minor notes about external Yahoo Finance queries, local command dependencies, and financial-decision caution.

This skill is reasonable to use if you are comfortable with ticker lookups going to Yahoo Finance and with running a small local shell helper. Verify dependencies, market data, and calculations yourself, and do not treat its ETF tips as professional investment advice.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI02: Tool Misuse and Exploitation

What this means

ETF symbols entered for price or comparison lookups may be sent to Yahoo Finance.

Why it was flagged

The script sends the user-supplied ETF code to Yahoo Finance to retrieve quote data. This external API use is disclosed in the skill documentation and is proportionate to the quote feature.

Skill content

curl -s "https://query1.finance.yahoo.com/v8/finance/chart/${code}.SS"

Recommendation

Use only non-sensitive ticker queries and verify market data independently before relying on it.

Info

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

The skill may fail or behave differently if expected local tools are unavailable or different from what the author tested.

Why it was flagged

The included helper is a shell script that depends on local command-line tools, while the registry requirements declare no required binaries. This may affect setup reliability but does not show hidden or unrelated behavior.

Skill content

#!/bin/bash ... curl -s ... python3 -c ... | bc

Recommendation

Confirm curl, python3, and bc are available if you intend to use the shell helper; maintainers should declare these dependencies.

Low

#ASI09: Human-Agent Trust Exploitation

What this means

Users could over-trust simple ETF recommendations or estimated returns when making investment decisions.

Why it was flagged

The skill provides ETF recommendations and investment tips that could influence financial decisions, but it also includes risk and non-advice disclaimers.

Skill content

热门ETF推荐 ... 投资建议 ... 推荐沪深300ETF (510300) ... 仅供参考，不构成投资建议

Recommendation

Treat the output as educational reference only and consult reliable financial sources or a qualified adviser before investing.