盘前简报Pro
PassAudited by ClawScan on May 1, 2026.
Overview
The skill appears to be a coherent offline teaching demo, with only disclosed local execution, local file storage, and an optional scheduled run to consider.
This skill looks safe for its stated offline educational purpose. Before installing, decide whether you want to run the Python script manually or on a schedule, avoid running it as root, and do not put real financial holdings into the config unless you are comfortable storing them locally.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing and using the skill means running local code that generates reports and writes files in the workspace.
The skill instructs the user to run a local Python script. This is expected for the stated offline demo purpose and is user-directed, not hidden.
python3 scripts/pre_market_briefing_public.py
Run it only from a trusted local workspace and review the script if you customize it.
If enabled, the script will keep running on the schedule and continue creating or updating local reports.
The documentation includes an optional cron entry, which would make the script run repeatedly on weekdays. It is disclosed and optional, but it is still persistence.
0 9 * * 1-5 cd /root/.openclaw/workspace && python3 scripts/pre_market_briefing_public.py
Only add the cron job if you want recurring runs, use your own non-root workspace path, and remove the crontab entry when no longer needed.
Running scheduled local code as root could increase the impact of mistakes or future modifications.
The optional cron example points to a root-owned workspace path. The script does not appear to need elevated privileges, so running it as root would be unnecessary.
cd /root/.openclaw/workspace
Run the skill under a normal user account and adjust the cron path to that user's OpenClaw workspace.
If you replace the sample holdings with real holdings, those details may remain in local configuration or generated local reports.
The included config stores portfolio-like fields locally. The provided values appear to be examples, but real user edits could create sensitive local financial records.
"holdings": [{ "code": "000001", "name": "平安银行", "shares": 1000, "cost_price": 10.0 }]Keep the demo data if using it for learning, or protect/delete local config and log files if you enter real portfolio information.