Back to skill
v1.0.2

Stock Picker Orchestrator

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 5:58 AM.

Analysis

This instruction-only skill coherently routes stock-analysis work through other analysis skills with budget controls, with only ordinary cautions about dependent skills, external data calls, and cache reuse.

GuidanceBefore installing, make sure you also trust the dependent market-data, macro/news, valuation, and portfolio-risk skills. For broad screenings or portfolio refreshes, ask for a Light or Standard budget unless you intentionally want a deeper run, and check the final report’s fetched-data timestamps, assumptions, confidence, and gaps.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation
SeverityLowConfidenceHighStatusNote
SKILL.md
Execute required upstream skills for the chosen route... Default safe presets... `Deep`: 120+ calls

The skill instructs the agent to invoke other analysis skills and can run a large number of market-data requests. This is disclosed and central to the purpose, and the same artifact provides budget controls.

User impactA broad or deep request may consume API quota, take longer, or gather more market/news data than a light analysis.
RecommendationConfirm the intended budget preset and universe size before deep screenings or portfolio refreshes.
Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Insecure Inter-Agent Communication
SeverityLowConfidenceHighStatusNote
SKILL.md
Requires dependent skills (`vnstock-free-expert`, macro/news monitors, and `equity-valuation-framework`) to be available in the same workspace.

The skill is explicitly designed to coordinate multiple other skills in the workspace, so user prompts and intermediate analysis may be passed across those dependencies.

User impactThe quality and data-handling behavior of the overall workflow depends on the installed dependent skills.
RecommendationInstall and trust the dependent data, news, valuation, and portfolio-risk skills before using this orchestrator with sensitive portfolio details.
Memory and Context Poisoning
SeverityLowConfidenceHighStatusNote
SKILL.md
Reuse cached artifacts before making new requests.

The workflow may rely on previously cached analysis artifacts. This is purpose-aligned for saving API calls, but cached market/news context can become stale or carry forward earlier errors.

User impactOld or incorrect cached analysis could affect recommendations if not checked.
RecommendationReview the reported fetch dates and confidence/gaps sections, and request a fresh run when decisions depend on current market data.