ClawHub

Value Waterfall

v1.0.0

Decompose value creation or destruction through waterfall analysis. Use for understanding value drivers and financial analysis.

⭐ 0· 89·0 current·0 all-time
by@linuszz
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name and description match the content of SKILL.md (a waterfall analysis template). The skill requests no binaries, credentials, or config paths — consistent with a purely instructional/formatting capability.
ℹ
Instruction Scope
SKILL.md is a self-contained template and prompt for producing waterfall analyses. It does not instruct the agent to read files, call external endpoints, or access environment variables. It is somewhat generic (uses $ARGUMENTS) and does not mandate data validation or provenance, so the agent could generate numbers if the user doesn't supply data — verify inputs and outputs when using it.
✓
Install Mechanism
No install spec and no code files — lowest-risk pattern for skills. Nothing will be written to disk or executed beyond the agent's normal response generation.
✓
Credentials
No environment variables, credentials, or config paths are requested, which is proportionate for a formatting/analysis template.
✓
Persistence & Privilege
always is false and default autonomous invocation is allowed (normal). The skill does not request persistent privileges or modify other skills or system settings.
Scan Findings in Context
[no-code-files] expected: The regex scanner had no code to analyze because this is an instruction-only skill. That is expected for a template-style helper.
Assessment
This skill is essentially a template for producing waterfall analyses and does not request secrets or install anything — generally safe to install. Before using it, supply accurate baseline and component numbers (or ask the tool to operate only on user-provided data), verify the arithmetic and assumptions in its outputs, and avoid pasting sensitive credentials or protected financial documents into prompts unless you trust the agent environment. If you plan to connect this to external systems or automate calculations, use a separate, purpose-built integration that explicitly requests only the needed API keys.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cvedfw49a38f8crmcphwkmh83b5jq

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments