A-Share Global Peer

PassAudited by ClawScan on May 10, 2026.

Overview

This appears to be a coherent finance research helper that uses web search, a bundled Python script, and optional finance/search API keys for its stated purpose.

Before installing, be comfortable with the skill running its bundled Python helper, sending company-related queries to web/search or finance-data providers, and using any optional API tokens you configure. Verify financial data independently before relying on the report.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may run a local Python command and perform web searches when answering peer-comparison requests.

Why it was flagged

The skill exposes local command execution and web search, but the command is scoped to the bundled helper script and is directly tied to the stated finance research workflow.

Skill content
`web_search` | Search for global leaders, market share data ... `exec` | Run Python scripts for data fetching ... `python3 scripts/get_company_products.py --company "<company_name_or_code>" --output json`
Recommendation

Use the skill for intended company lookups, and avoid placing unrelated shell content or confidential information in the company-name input.

What this means

If you set a Tushare token, the skill can use that provider account for company-data queries.

Why it was flagged

The helper can use a Tushare API token from the environment to query company data. This is disclosed and purpose-aligned, and the code does not show token printing or unrelated transmission.

Skill content
return os.environ.get('TUSHARE_TOKEN') ... ts.set_token(token) ... pro = ts.pro_api()
Recommendation

Provide only the optional API keys you intend to use, and prefer least-privilege or revocable provider tokens where available.