Security Equity Research

PassAudited by ClawScan on May 11, 2026.

Overview

This instruction-only equity research skill appears purpose-aligned and does not request credentials, installation, persistence, or privileged access, but users should verify any data sources, calculations, and compliance claims before relying on its reports.

Before installing, confirm that any data collection uses sources you are allowed to access, review any Python valuation calculations before running them, and have qualified analysts or compliance staff validate generated research reports before publication or investment use.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the agent has browsing or data-access tools, it may gather market and company information from external sources, so users should ensure the sources are trusted and permitted.

Why it was flagged

The skill says it can automatically collect financial, macro, and industry database material. This is aligned with equity research, but the visible artifact does not specify source boundaries or approval steps.

Skill content
自动抓取财报/宏观/行业数据库,一键生成数据底稿
Recommendation

Use only approved public or licensed data sources, verify citations, and confirm before accessing paid, private, or confidential databases.

What this means

An agent with code execution tools might run these examples locally to calculate valuations, but the artifact does not show hidden or privileged execution.

Why it was flagged

The SKILL.md includes Python valuation-model examples. They are visible, purpose-aligned examples rather than hidden code or an automatic install/run flow.

Skill content
```python
import numpy as np
import pandas as pd
from scipy.optimize import brentq

def dcf_valuation(...)
Recommendation

Review assumptions and formulas before executing valuation code, and do not treat example calculations as audited financial models.

What this means

Users might over-rely on generated compliance checks or investment language if they assume the output is regulator-ready.

Why it was flagged

The skill advertises compliance-checking support. This can be useful, but the provided artifacts do not prove regulatory completeness or official review.

Skill content
内置合规检查清单,自动识别风险表述
Recommendation

Treat compliance and investment-rating output as draft assistance only, and have a qualified human reviewer validate reports before publication or trading use.