Financial Event Historical Impact Analyzer
PassAudited by ClawScan on May 10, 2026.
Overview
This skill appears purpose-aligned for financial event analysis, but users should notice that it uses external market-data services, API tokens, package/font setup, and persistent report files.
Before installing or using this skill, confirm you are comfortable providing TUSHARE_TOKEN and optionally FRED_API_KEY, installing the documented Python/font dependencies, allowing calls to Yahoo Finance/Tushare/FRED, and keeping generated reports under ~/.openclaw/workspace/memory/reports. The provided artifacts do not show hidden exfiltration, destructive actions, or deceptive behavior.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your market-data API tokens may be used to make requests and may consume provider quota or reveal usage to those services.
The skill uses provider API credentials for Tushare and optionally FRED, which is expected for financial data retrieval but gives the skill access to those provider accounts or quotas.
"requiredEnvVars": ["TUSHARE_TOKEN"], "optionalEnvVars": ["FRED_API_KEY"], "primaryCredential": "TUSHARE_TOKEN"
Use dedicated, least-privilege API keys where possible and confirm the environment variables are only set for services you intend to use.
Running an analysis will contact external services and create local report/data/chart files.
The skill explicitly performs network calls to external market-data providers and writes output files; these capabilities are central to its stated purpose.
"networkAccess": true, "externalServices": ["Yahoo Finance", "Tushare API", "FRED API"], "outputsFiles": true, "writesFiles": true
Run it only for intended analyses, be aware of API quotas, and review the generated output directory.
Installing dependencies adds third-party code to the local Python environment.
The skill documents user-directed installation of third-party Python packages; this is normal for a data-analysis skill but depends on external package provenance.
pip install yfinance pandas numpy matplotlib tushare
Install packages from trusted indexes, consider using a virtual environment, and pin versions if reproducibility is important.
Analysis outputs and possibly user-specific event descriptions may remain on disk after the run.
The workflow stores generated data, charts, and reports in a persistent workspace memory path.
OUTPUT_DIR="$HOME/.openclaw/workspace/memory/reports/brent_crude_20260328_increase"
Review or delete old report folders if you do not want generated analysis artifacts retained.