Ipo Alert

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to do what it says: fetch public IPO/listing schedules, print alerts, and keep a small local state file to avoid duplicates.

Before installing, confirm you are comfortable with the script periodically contacting 38.co.kr and writing ~/.config/ipo-alert/state.json. No credentials are required; review any heartbeat or cron setup so it only runs as often as you intend.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running the skill will contact 38.co.kr to retrieve IPO and listing information.

Why it was flagged

The script executes the local curl binary to fetch web pages. The URL sources are fixed to the disclosed 38.co.kr IPO data source, making this purpose-aligned rather than suspicious.

Skill content
result = subprocess.run(["curl", "-s", url], capture_output=True)
Recommendation

Use it only if you are comfortable with periodic requests to 38.co.kr; keep the fetch targets fixed and review any future changes to command arguments.

What this means

The skill will retain a small record of previously notified IPO/listing items and last check time on your machine.

Why it was flagged

The script stores notification state in a persistent local file so it can suppress duplicate alerts across runs.

Skill content
STATE_FILE = Path.home() / ".config/ipo-alert/state.json"
Recommendation

Delete ~/.config/ipo-alert/state.json if you want to reset notification history; avoid manually inserting untrusted content into this state file.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

If configured, the skill may run periodically and produce alerts without a fresh manual command each time.

Why it was flagged

The documentation suggests optional recurring execution through heartbeat or cron. This is disclosed and aligned with an alerting skill, but users should recognize it enables ongoing automated checks.

Skill content
On each heartbeat:
1. Run `python3 <skill_dir>/check_ipo.py daily`
Recommendation

Review the heartbeat or cron schedule before enabling it, and choose a cadence that matches how often you want IPO alerts.