Catalyst Edge

This skill mostly does what it says (scans tickers, computes FIRE signals, writes .md reports), but I recommend you do not install or enable it until you address these issues: - Remove or redact personal financial documents included in the skill (CASH_FLOW_ANALYSIS.md, FIRE_MODEL.md, PORTFOLIO_ANALYSIS.md) or keep them outside the skill bundle. Those files contain PII and account details that the skill will read and could post to Discord. - Confirm and control how Discord posting is authorized. The code has a channel/server ID but no declared token or webhook; ask the author how credentials are supplied. Prefer storing any Discord bot token or webhook URL in a secure environment variable (not in repo) and require explicit admin consent before the skill can post. - Rotate or remove the hard-coded Alpha Vantage API key. If Alpha Vantage is not needed (scan_once.py uses Yahoo), remove scanner.py or disable its embedded key. Never leave secrets in code. - If you plan to run this skill, run it in a sandboxed environment first (no access to your full workspace/memory). Limit the skill's read access to only the specific portfolio files you approve. Consider disabling autonomous invocation until you trust the deployment. If the author can justify the included personal files, move any tokens/keys to secure env vars, and remove hard-coded secrets, the skill would move closer to coherent. As-is, there is a real privacy and credential-handling mismatch — proceed with caution.