Ruiping

AdvisoryAudited by Static analysis on May 5, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may search the web for current topics and base commentary on retrieved sources.

Why it was flagged

The skill directs the agent to use an external search tool when the user asks for recent news; this is disclosed and aligned with the news-analysis purpose, but web results are untrusted inputs.

Skill content
1. 先用 `search_web` 搜索最新动态
Recommendation

Check cited sources and avoid treating search-derived commentary as verified fact without review.

What this means

Users could over-rely on confident commentary for financial, work, or personal decisions.

Why it was flagged

The skill intentionally pushes decisive language and concrete investment-style recommendations. This is part of its stated purpose, but it can sound more certain than the evidence supports.

Skill content
结论要犀利,不能模棱两可 ... 如果你是投资者:[具体方向、关联标的、时间窗口]
Recommendation

Treat outputs as opinionated analysis, verify facts independently, and consult qualified advice before making financial decisions.

What this means

Manual dependency installation could pull a newer package version than the author tested.

Why it was flagged

The dependency is lower-bounded rather than pinned. No install spec auto-installs it, so this is a minor hygiene note for users who manually install requirements.

Skill content
requests>=2.28.0
Recommendation

Pin dependency versions or remove unused requirements if maintaining or auditing the skill.