Skills of A-share announcement data released by ft.tech.

PassAudited by ClawScan on May 1, 2026.

Overview

The skill coherently queries disclosed FT market data APIs and can save requested PDFs locally; no artifact-backed malicious behavior was found.

This appears safe for its stated purpose. Be aware that it contacts market.ft.tech and can save PDF files locally; use only the documented subskills and check output filenames when downloading.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill runs included Python scripts to contact the market data service and return results.

Why it was flagged

The skill executes bundled Python handler scripts through a dispatcher. This is central to the documented purpose and does not use a shell, but it is still local code execution that should be limited to the documented subskill names and user-intended parameters.

Skill content
result = subprocess.run([sys.executable, handler] + sys.argv[2:], cwd=SKILL_ROOT)
Recommendation

Invoke only the documented subskills and review arguments, especially when requesting downloads.

What this means

Users have less external context about who maintains the skill or where to verify updates.

Why it was flagged

The skill's public provenance is limited. The supplied files are small and readable and no external packages are installed, so this is a provenance note rather than a material concern.

Skill content
Source: unknown; Homepage: none
Recommendation

Prefer installing from trusted publishers or review the included code before use.