Ai Investing Assistant With Framework
v0.1.0Analyze a US stock using a value investing checklist and output detailed scoring steps.
⭐ 0· 283·1 current·1 all-time
bykris@kristian-zf
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (value-investing checklist for US stocks) matches the included Python script and SKILL.md. The code implements the listed metrics (ROE, debt ratio, FCF conversion, moat) and returns a rating and reasons. Minor mismatch: SKILL.md lists 'python3' as a required binary but the registry metadata shows no required binaries; this is a documentation inconsistency, not a security risk.
Instruction Scope
SKILL.md instructs the agent to run scripts/invest_analysis.py and provide metrics via stdin (or ticker via argv). The script only reads stdin/argv and performs local computation; it does not read other files, environment variables, or external endpoints.
Install Mechanism
There is no install spec and no downloads. The skill is instruction-only with a bundled Python script; nothing is written to disk beyond the included files. This is low-risk.
Credentials
The skill requests no environment variables, credentials, or config paths and the code does not access them. No secrets or unrelated service tokens are required.
Persistence & Privilege
The skill is not marked always:true, does not modify other skill configurations, and does not request persistent privileges. It performs a one-off local computation when invoked.
Assessment
This skill is coherent and appears safe: it runs a local Python script that scores user-supplied metrics and returns a JSON result. Before installing, note: (1) you must provide the metrics via stdin JSON (or a ticker as a CLI arg) — the script does not fetch live market data, so results depend on accurate inputs; (2) SKILL.md indicates 'python3' and the code uses modern syntax (PEP 604 union types like 'float | None'), so ensure the runtime is Python 3.10+; (3) there are no network calls or credential requests, so it won't exfiltrate secrets. If you need automatic live data or broker integration, this skill does not provide that and would need trustworthy additional components. Review or run the script locally first to confirm behavior matches your expectations.Like a lobster shell, security has layers — review code before you run it.
latestvk979ye1v3mq55mvdr40xg8gef982336y
License
MIT-0
Free to use, modify, and redistribute. No attribution required.