A Stock Daily Express
Analysis
The skill mostly matches its stock-report purpose, but it overstates built-in fact-checking/accuracy and requires local Python execution with an unpinned data package.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
| ✅ **事实核查** | 内置数据验证，保证数据准确 |
The supplied JavaScript fetches akshare data and formats a report, but it does not implement an independent fact-checking step or use the optional ai-fact-checker dependency. This overstates reliability for financial content that users may publish.
const output = execSync(`python -c "${pythonCode.replace(/"/g, '\\"')}"`, { encoding: 'utf8', maxBuffer: 1024 * 1024 * 2 });The skill runs a local shell command to execute inline Python. The Python code is static and purpose-aligned with fetching market data, but users should notice that installing/using the skill involves local command execution.
- `akshare` - 财经数据接口（需要 `pip install akshare`）
The skill relies on an external Python package installed outside package.json and without a pinned version. This dependency is expected for the stated purpose, but its provenance/version is not constrained by the artifacts.