Back to skill
Skillv1.0.0
ClawScan security
US Stock Analysis Lite · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 31, 2026, 4:21 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- Instruction-only skill that provides a short, web-driven fundamental snapshot for US stocks and only requires web search/fetch — its requested access and behavior align with the stated purpose.
- Guidance
- This skill is coherent for quick, first-pass fundamental checks — it only uses web search/fetch and points to public sources and SEC filings. Before relying on its output: verify any material figures against official filings (SEC) or a trusted data provider; do not enter private credentials (none are needed); and treat its 'lite' read as informational, not an investment recommendation. If you want stronger assurances, ask the publisher for provenance (who maintains the skill) or prefer a skill from a known vendor with an audited code bundle.
Review Dimensions
- Purpose & Capability
- okName and description match the runtime instructions: the skill is a lightweight fundamental-analysis checklist that uses web searches and fetched financial data. It does not request unrelated credentials, binaries, or system access.
- Instruction Scope
- okSKILL.md confines runtime actions to web_search and web_fetch queries and specifies preferred sources (Yahoo/Google/SEC). It does not instruct the agent to read local files, environment variables, or other system-wide configuration, nor to exfiltrate data to unexpected endpoints.
- Install Mechanism
- okNo install spec and no code files — instruction-only skill. Nothing is written to disk and no external packages or downloads are requested.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths. The data access it needs (public web data) is proportionate to its purpose.
- Persistence & Privilege
- okalways is false and the skill does not request elevated or persistent system privileges. It will run only when invoked and does not modify other skills or system-wide settings.