stock-industry-analyzer

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill does not show credential theft or destructive behavior, but it presents hardcoded/mock news and randomized technical indicators as real stock analysis, so users should review it carefully before trusting its reports.

Install only in an isolated Python environment, verify any dependencies you install, and do not treat the generated reports as investment advice. Before enabling scheduled runs, confirm the data sources are real and current, and review or modify the code so mock/static news and randomized indicators are clearly labeled or removed.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Users may believe the report is based on fresh news when parts of it are static or generated, which is especially risky for investment-related decisions.

Why it was flagged

The fetcher labels hardcoded template items as realtime news rather than actually fetching those articles, while the skill is described as automatically collecting current domestic and international financial news.

Skill content
news_templates = [ ... {"title": "宁德时代发布新一代电池技术,续航突破1000公里", ... "url": "https://finance.eastmoney.com/a/20260313.html"} ... ]; ... "api_source": "realtime"
Recommendation

Treat the reports as demo or educational output unless the news-fetching code is replaced with verified live data sources and clearly labels mock/static data.

What this means

The skill may produce persuasive-looking buy/avoid guidance from random values, causing users to overtrust unreliable financial analysis.

Why it was flagged

Technical indicators used in the analysis are randomized rather than calculated from actual historical price data, yet the skill generates stock scores and suggestions.

Skill content
ma5 = price * random.uniform(0.98, 1.02)
ma10 = price * random.uniform(0.96, 1.04)
ma20 = price * random.uniform(0.94, 1.06)
rsi = random.uniform(30, 80)
Recommendation

Do not rely on the generated recommendations for trading; require transparent, deterministic indicator calculations from real historical market data.

What this means

Dependency changes could affect behavior or reliability over time.

Why it was flagged

The dependency list uses lower-bound version ranges and no lockfile, so future installs may pull newer package versions. The packages are purpose-aligned for financial data and analysis.

Skill content
akshare>=1.12.0
pandas>=1.5.0
jieba>=0.42.0
yfinance>=0.2.0
Recommendation

Install in an isolated environment and prefer pinned, reviewed dependency versions for repeatable behavior.

What this means

Local reports and databases may accumulate stale or incorrect market context over time.

Why it was flagged

The skill is designed to keep local news, trend, stock, report, and log data for long periods. This is disclosed and fits the historical-analysis purpose.

Skill content
"data_retention": { "news": "永久", "industry_trend": "永久", "stock_kline": "永久", "reports": "3年", "logs": "1年" }
Recommendation

Periodically review and clean the local data store, especially if the skill is used for ongoing analysis.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

If scheduled, the skill will keep fetching/analyzing and writing local data on a recurring basis.

Why it was flagged

The skill documents optional periodic execution through cron. This is disclosed and user-configured, not hidden background persistence.

Skill content
每30分钟自动更新(可通过cron设置) ... /30 * * * * python /path/to/main.py
Recommendation

Only enable the cron schedule if you want ongoing background analysis, and disable it when no longer needed.