investoday-stock-financial-analysis
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This instruction-only finance skill appears purpose-aligned and limited to reading public stock data through a declared finance-data dependency.
This skill looks safe for its stated purpose of generating financial-analysis reports from public stock data. Review the separate investoday-finance-data dependency, and avoid entering private personal or confidential information because stock identifiers may be sent to the financial data API.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The main behavior of fetching financial data depends on another skill, so the safety and privacy properties also depend on that separate component.
The skill depends on a separate finance-data skill that is not included in the provided artifact set; this is disclosed and purpose-aligned, but users should review the dependency because it controls the underlying data access.
requires:\n skills: ["investoday-finance-data"]
Before installing, review the investoday-finance-data skill and confirm its data sources, permissions, credential handling, and API behavior are acceptable.
Using the skill may send the requested stock name or code to the declared financial data provider to retrieve public market data.
The skill instructs the agent to call multiple read-only financial data tools, potentially in parallel. This is expected for the stated financial analysis purpose and is limited to GET-style market-data retrieval.
Step 1-7 可并行调用；分析时以最新一期财报为主，并用最近 2-4 期数据辅助判断趋势。
Use it for public stock-analysis questions, and avoid including unnecessary personal or confidential information in the stock query.