Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Einstein Research Suite

v1.0.0

A complete quantitative market research toolkit for serious traders and investors. Includes 11 specialized skills covering backtesting, breadth analysis, bub...

0· 125·0 current·0 all-time
byRunByDaVinci@clawdiri-ai

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for clawdiri-ai/einstein-research.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Einstein Research Suite" (clawdiri-ai/einstein-research) from ClawHub.
Skill page: https://clawhub.ai/clawdiri-ai/einstein-research
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install einstein-research

ClawHub CLI

Package manager switcher

npx clawhub@latest install einstein-research
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The SKILL.md and README claim a coherent set of 11 quantitative research tools (backtesting, breadth, options, etc.). However, the repository does not actually contain those sub-skill code files; it only lists them as included and shows clawhub install commands. The README also lists Python dependencies (yfinance, pandas, numpy, scipy) but the pack has no install spec declaring or installing them. This is a provenance / completeness mismatch rather than an immediate functional contradiction.
Instruction Scope
Runtime instructions are limited to describing the pack and showing clawhub install commands for the listed sub-skills. There are no instructions to read arbitrary files, exfiltrate data, or access environment variables. The scope is constrained to installing/using other skills.
Install Mechanism
There is no install spec in the pack itself (instruction-only). That is low-risk, but the README dependency list (Python packages) is not enforced or declared in an install step, which may lead to surprising post-install requirements. Also, because the pack defers to clawhub to fetch sub-skills, the security of those sub-skills depends entirely on their registry entries.
Credentials
The pack declares no required environment variables, credentials, or config paths. That is proportionate to the high-level description. Still, the included sub-skills (which will be installed separately) may request credentials; you should inspect them before granting any secrets.
Persistence & Privilege
The pack is not marked always:true and does not request elevated/persistent privileges in its metadata. Autonomous invocation is allowed (default) but that is normal; nothing in this pack requests additional persistent system access.
What to consider before installing
This pack appears to be a wrapper/pack that points to 11 separate skills rather than containing their code, and it lacks an install spec for the Python libraries the README mentions. Before installing: 1) Verify the origin — there's no homepage and the owner is an opaque ID; check the registry listing and owner reputation. 2) Inspect each included sub-skill's SKILL.md and code (or registry page) to confirm they don't request unrelated credentials or network endpoints. 3) Be prepared to create an isolated environment (VM or container, or Python venv) and review/approve any Python packages (yfinance, pandas, numpy, scipy) before installing. 4) Do not provide brokerage or cloud credentials to the pack itself until you've audited each sub-skill that requests them. If you want higher assurance, install and test the sub-skills first in a sandbox and review any network calls they make.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cg9nexwc4s7ppy9j2tp4a5x83esgq
125downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

Einstein Research Suite

Professional quantitative market research for active traders and investors.

Included Skills

  1. Backtest Expert — Methodology for systematic strategy validation
  2. Backtest Engine — Run backtests on historical data with full metrics
  3. Market Breadth Analyzer — 0-100 composite breadth health score
  4. Market Bubble Detector — Quantitative bubble risk assessment
  5. Edge Candidate Generator — Turn observations into research tickets
  6. Follow-Through Day Detector — O'Neil FTD market bottom signals
  7. Options Strategy Advisor — Black-Scholes pricing, Greeks, P&L simulation
  8. Portfolio Risk Analyzer — VaR, stress testing, correlation matrix
  9. Macro Regime Detector — Cross-asset regime transition detection
  10. Headline Scenario Analyzer — 18-month scenario projections from news
  11. Market Theme Detector — Trending themes with lifecycle scoring

Quick Start

Install all skills in this pack:

clawhub install einstein-research-backtest-dv
clawhub install einstein-research-backtest-engine-dv
clawhub install einstein-research-breadth-dv
clawhub install einstein-research-bubble-dv
clawhub install einstein-research-edge-dv
clawhub install einstein-research-ftd-dv
clawhub install einstein-research-options-dv
clawhub install einstein-research-portfolio-risk-dv
clawhub install einstein-research-regime-dv
clawhub install einstein-research-scenario-dv
clawhub install einstein-research-themes-dv

License

MIT

Comments

Loading comments...