PE Monitor Pro

Provides multi-dimensional monitoring and reporting on personnel, equity, financing, finances, legal issues, government ties, collaborations, risks, competit...

Security Scan

The skill's requested credentials (Tianyancha and a news API key) and required binary (python3) match its stated portfolio-monitoring purpose; it is an instruction-only skill with no install steps or surprising permissions.

Purpose & Capability

Name and description describe multi-dimensional monitoring of portfolio companies. The declared requirements (TIANYANCHA_API_KEY for company registry data and NEWS_API_KEY for news) and python3 are reasonable and proportional for that purpose.

Instruction Scope

SKILL.md is high-level and lists companies and monitoring dimensions but contains no concrete commands. It does not instruct reading unrelated local files or other environment variables. However, the runtime behavior is vague (no example API calls or rate-limit/retention guidance), which gives the agent broad discretion when using the provided API keys.

Install Mechanism

No install spec or code files are present (instruction-only). This is low-risk because nothing will be downloaded or written by an install step.

Credentials

Only two environment variables are declared (TIANYANCHA_API_KEY, NEWS_API_KEY) and the primaryEnv is TIANYANCHA_API_KEY. Both are directly relevant to corporate and news lookups. No unrelated secrets or system config paths are requested.

Persistence & Privilege

always is false and the skill does not request system-wide configuration changes. Model invocation is permitted (normal default); combined with API keys this allows the agent to call external APIs autonomously, which is expected for this type of skill.

Scan Findings in Context

[no_findings_codebase_empty] expected: Regex scanner found nothing because this is an instruction-only skill with a single SKILL.md and no code files. That is expected; the security surface is the instructions and declared env vars.

Assessment

This skill appears coherent, but before installing: (1) only provide API keys with minimal read-only permissions and limited scope/quotas; (2) confirm you trust the skill owner (no homepage or source provided); (3) expect the agent to call external APIs autonomously—monitor logs or network activity if possible; (4) ask the publisher for concrete examples of API usage, data retention, and where generated reports are stored; (5) be prepared to revoke the keys if you see unexpected behavior.

---

name: pe-portfolio-monitor

description: |

私募股权基金投后监控专家。针对格思航天、垣信卫星、华晟新能源、

红太阳光电、徐工汽车、利氪科技等已投企业进行多维度监控。

支持：人员变动、股权变迁、融资事件、财务状况、法律案件、政企关系、

对外合作、舆论风险、竞对动向、技术突破、产品发布、上市进展监控。

Use when: 需要监控被投企业动态、生成投后报告、分析企业风险。

version: 1.0.0

metadata:

openclaw:

requires:

env:

- TIANYANCHA_API_KEY

- NEWS_API_KEY

bins:

- python3

primaryEnv: TIANYANCHA_API_KEY

emoji: 📊

---

# PE Portfolio Monitor

## 已投企业清单

- **垣信卫星**：千帆星座/G60星链，A轮67亿，监控发射进度和融资

- **格思航天**：卫星ODM制造，关注产能和G60星链订单

- **徐工汽车**：新能源重卡，混改后，监控IPO进度和市占率

- **利氪科技**：线控底盘，C轮10亿+，关注量产交付和车企定点

- **华晟新能源**：HJT异质结电池，监控技术路线竞争

- **红太阳光电**：光伏装备，关注设备订单

## 监控维度

1. 人员变动：高管变更、核心技术人员离职

2. 股权变迁：股权转让、增资扩股、股东变更

3. 融资事件：新一轮融资、估值变化

4. 财务状况：营收、亏损、现金流

5. 法律案件：诉讼仲裁、行政处罚

6. 政企关系：政府补助、项目中标

7. 对外合作：战略合作协议、供应链合作

8. 舆论风险：负面新闻、产品质量

9. 竞对动向：竞争对手融资、市场份额

10. 技术突破：专利申请、新产品发布

11. 产品发布：新产品上市、产线投产

12. 上市进展：IPO申报、招股说明书

## 使用示例

**监控垣信卫星：**