Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

AI Hedge Fund

v1.2.0

Run an AI-powered hedge fund simulation with 16+ legendary investor agents. Each agent analyzes stocks from their unique investment philosophy. Auto-detects...

0· 193·2 current·2 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for tanjinlimkelvin-dot/ai-hedge-fund.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "AI Hedge Fund" (tanjinlimkelvin-dot/ai-hedge-fund) from ClawHub.
Skill page: https://clawhub.ai/tanjinlimkelvin-dot/ai-hedge-fund
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install ai-hedge-fund

ClawHub CLI

Package manager switcher

npx clawhub@latest install ai-hedge-fund
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (AI-powered hedge fund simulation) aligns with the included code and instructions (runs a multi-agent analysis using an external repo). However there are mismatches: SKILL.md claims model autodetection checks $OPENCLAW_LLM_MODEL and a default fallback, but the provided run.py only reads /root/.openclaw/openclaw.json and will exit if that file is missing. Some runtime paths in SKILL.md (e.g., /data/workspace/skills/skills/...) don't match the repository layout, suggesting sloppy/inconsistent documentation.
!
Instruction Scope
SKILL.md tells the agent/user to git clone an external GitHub repository into /data/workspace and pip install it editable (pip install -e), then run the project's main script. Those steps will write third-party code to disk and run it. The run.py also reads /root/.openclaw/openclaw.json (host agent config) to detect the model, which goes beyond the skill's core task of stock analysis and accesses host configuration. The instructions also claim behavior (env var check and default model) that the code does not implement.
!
Install Mechanism
There is no registry install spec, but SKILL.md directs cloning from a public GitHub repo and performing pip install -e, which executes arbitrary setup/install hooks from upstream code. Installing unreviewed third-party code via pip from a repo is a moderate-to-high risk action and should be audited before running.
!
Credentials
The skill declares no required env vars, but run.py reads /root/.openclaw/openclaw.json to obtain the 'primary' model. Reading a root-level OpenClaw config is disproportionate because it may expose other agents' configuration (and potentially sensitive fields) beyond what's needed for a single simulation. SKILL.md's claim to also consult $OPENCLAW_LLM_MODEL is not reflected in the code, increasing confusion about what the skill will access.
Persistence & Privilege
The skill is not forced-always and does not request persistent platform privileges. It does, however, instruct cloning code into /data/workspace and pip installing it (local persistence of third-party code). The only direct sensitive host access is reading /root/.openclaw/openclaw.json; the skill does not modify other skills or global agent settings in the provided files.
What to consider before installing
This skill performs what it claims (multi-agent stock analysis) but has worrisome implementation details. Before using it: 1) Inspect the upstream repository (https://github.com/virattt/ai-hedge-fund) — review its setup.py/pyproject and src/main.py for network calls, secrets handling, or arbitrary shell execution. 2) Avoid blindly running the provided pip install -e; clone in an isolated environment or container and run there. 3) Prefer supplying --model manually instead of relying on the skill's autodetect (the code reads /root/.openclaw/openclaw.json which can expose host agent configuration). 4) If you must install, run tests and a static code audit on the repository first. 5) If you lack the ability to audit the upstream code, treat this skill as potentially risky and do not run it on systems that hold secrets or production credentials.

Like a lobster shell, security has layers — review code before you run it.

latestvk973p1rkjry1tk5vwsh8fc0xa984qf1a
193downloads
0stars
3versions
Updated 2w ago
v1.2.0
MIT-0

AI Hedge Fund Skill

Multi-agent investment analysis using legendary investor personas.

Project: https://github.com/virattt/ai-hedge-fund

Setup (first time)

# Clone project
git clone https://github.com/virattt/ai-hedge-fund /data/workspace/ai-hedge-fund

# Install
pip install -e /data/workspace/ai-hedge-fund --break-system-packages --quiet
pip install yfinance --break-system-packages --quiet

Run

Via skill script (auto-detects model):

python3 /data/workspace/skills/skills/ai-hedge-fund/scripts/run.py \
  --tickers NVDA \
  --analysts-all \
  --show-reasoning

Or direct CLI:

cd /data/workspace/ai-hedge-fund
python3 src/main.py \
  --tickers NVDA \
  --start-date 2026-01-01 \
  --end-date 2026-04-12 \
  --model "minimax/minimax-m2.5:free" \
  --analysts-all \
  --show-reasoning

Model Auto-Detection

Not hardcoded. The run.py script auto-detects from:

  1. $OPENCLAW_LLM_MODEL environment variable
  2. OpenClaw config (/root/.openclaw/openclaw.json)
  3. Default: minimax/minimax-m2.5:free

You can also specify manually via --model flag.

Available Models

Any model from src/llm/api_models.json, e.g.:

  • minimax/minimax-m2.5:free (default, free)
  • qwen/qwen3.6-plus:free (free)
  • gpt-4.1 (OpenAI)
  • claude-sonnet-4-6 (Anthropic)

All 16+ Agents

AgentPhilosophy
Warren BuffettWonderful business at fair price
Charlie MungerOnly wonderful businesses
Ben GrahamMargin of safety
Michael BurryContrarian deep value
Cathie WoodInnovation & disruption
Bill AckmanActivist investor
Peter LynchTen-baggers
Phil FisherScuttlebutt
Stanley DruckenmillerMacro asymmetric
Nassim TalebAntifragility
Mohnish PabraiDhandho
Rakesh JhunjhunwalaBig Bull
Aswath DamodaranValuation
+ Quant agentsFundamentals, Technical, Valuation, Sentiment

Output

Each agent outputs: signal (bullish/bearish/neutral), confidence %, reasoning. Portfolio Manager aggregates into final BUY/SELL/HOLD.

Data Source

yfinance (free, no API key needed)

Comments

Loading comments...