Stock Report Generator

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This appears to be a purpose-aligned stock report generator, but users should verify its financial conclusions and install/run its Python components carefully.

Before installing, be comfortable running a local Python script and optional packages. Verify any generated stock data and recommendations independently, and do not treat the report as licensed investment advice.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing Python packages can run third-party code on the user's machine.

Why it was flagged

The README asks users to rely on local Python packages and a manual pip install. This is purpose-aligned, but users should notice that dependency installation is outside a pinned install specification.

Skill content
依赖项

- Python 3.10+
- kimi_finance(股票数据)
- matplotlib(可视化)
- memory_search(可选)

安装依赖:
```bash
pip install matplotlib
```
Recommendation

Install dependencies in a virtual environment, verify package names and sources, and pin versions if using this in a repeatable workflow.

What this means

Running the script executes local code and may create report outputs in the working directory.

Why it was flagged

The documented workflow includes running a local Python script. This is central to the stated report-generation purpose and is user-directed rather than hidden or automatic.

Skill content
python3 generate_report.py 五粮液 000858.SZ 全天复盘 2026-03-21
Recommendation

Run it only from the installed skill directory or a controlled workspace, and review generated files before sharing or relying on them.

What this means

A user could make financial decisions based on generated ratings or strategy language.

Why it was flagged

The report framework can produce confident investment and position-sizing recommendations. This matches the skill's purpose, but it is high-stakes content that users should not treat as guaranteed or professional advice.

Skill content
| **A** | 90-100分 | 优秀 | 强烈推荐,可重仓配置 |
Recommendation

Cross-check market data and conclusions with official sources or a qualified financial professional; treat the generated report as informational only.

What this means

Past stored scores or notes could affect generated comparisons and recommendations.

Why it was flagged

The skill documents optional use of historical score lookup. Reusing stored historical context is purpose-aligned for trend comparison, but stale or inaccurate history could influence future reports.

Skill content
memory_search — 历史评分查询(可选)
Recommendation

Keep historical data sources accurate, and avoid storing sensitive personal portfolio details in shared or persistent memory unless intended.