Stanley Druckenmiller Workflow

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a coherent public-market-analysis skill that fetches financial data, optionally uses third-party data packages/API keys, and caches market snapshots locally, with no artifact evidence of hidden trading, credential theft, or destructive behavior.

Before installing, be comfortable with the skill fetching public financial data from third-party providers, optionally using finshare/akshare and a FRED API key, and caching market snapshots locally. Treat outputs as research framework information, not trading instructions.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Market outputs may depend on availability, accuracy, and freshness of third-party public data feeds.

Why it was flagged

The helper script is designed to call external market-data providers and then fall back to cached data. This is expected for a market-panel workflow, but users should understand that the skill relies on external data sources.

Skill content
Fallback sources:\n- Yahoo chart API\n- Stooq daily CSV ...\n- FRED proxy series ...\n- AkShare for A-share structure ...\n- Local cache
Recommendation

Check the reported timestamps and evidence anchors before relying on a generated brief.

What this means

If configured, the skill may read a FRED API key from the local environment to fetch macro data.

Why it was flagged

The README documents an optional FRED API key for improved macro-series access. This is purpose-aligned and not shown being logged or sent elsewhere, but it is still a credential-like value.

Skill content
export FRED_API_KEY="<your_fred_api_key>"
Recommendation

Use only a FRED-specific API key, avoid placing unrelated secrets in the environment, and revoke or rotate the key if it is exposed.

What this means

Installing optional packages could introduce normal third-party package supply-chain risk.

Why it was flagged

The optional dependency installation is user-directed and purpose-aligned, but the packages are not pinned to exact versions in the documented command.

Skill content
pip install finshare akshare
Recommendation

Install optional dependencies from trusted package indexes and consider pinning versions in a controlled environment.

What this means

Generated analysis could fall back to cached market data if live sources fail, so stale local data may affect conclusions.

Why it was flagged

The script persists market snapshot data locally and can reuse it as a fallback. The default path is scoped to the skill directory, but it is still persistent state.

Skill content
DEFAULT_RUNTIME_DIR = SKILL_ROOT / ".runtime"\nRUNTIME_DIR = Path(os.getenv("STANLEY_RUNTIME_DIR", str(DEFAULT_RUNTIME_DIR))).expanduser().resolve()\nCACHE_PATH = RUNTIME_DIR / "market-snapshots" / "market-panels-cache.json"
Recommendation

Review timestamps in outputs and clear the runtime cache if you suspect stale or incorrect data.