Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Valuation

Provides tools for discounted cash flow, comparable company analysis, revenue multiples, and financial projections in valuation tasks.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 18 · 0 current installs · 0 all-time installs
bybytesagain4@xueyetianya
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill description promises valuation tooling (DCF, comparable company analysis, revenue multiples, projections). The included script primarily implements a logging/listing CLI that writes and reads logs under a data directory; it does not appear to perform valuation calculations in the visible portion. That is a substantive mismatch between claimed functionality and actual code.
Instruction Scope
SKILL.md documents commands and the optional VALUATION_DIR; the script's behavior (creating ~/.local/share/valuation, appending logs, exporting data) aligns with that. The instructions do not request credentials or access to unrelated system paths. Note: the skill will create and write files in the user's home (~/.local/share/valuation).
Install Mechanism
No install spec (instruction-only) is present, which is low-risk. However, a runnable script is included in the package but there are no instructions about installing or auditing it before execution. The presence of an executable file without an install/verification step increases the need for manual review.
Credentials
Registry metadata lists no required environment variables, but SKILL.md and the script reference VALUATION_DIR (optional) and the script uses HOME for a default data directory. Using HOME is normal; VALUATION_DIR is reasonable as an optional override but it is not declared in the registry's requires.env. This is not a high-risk mismatch but is worth noting.
Persistence & Privilege
The skill does not request elevated privileges or system-wide configuration changes. It stores data under a per-user path (~/.local/share/valuation) and does not declare always:true. It appears limited to its own data directory and does not modify other skills or global agent settings.
What to consider before installing
The package appears to implement a simple CLI that logs inputs and can export those logs; it does not, in the visible portion, perform DCF or valuation computations despite the description claiming those features. Before installing or running: (1) review the full, untruncated script to ensure there are no unexpected network calls or credential accesses; (2) be aware the tool will create and write files under ~/.local/share/valuation (or VALUATION_DIR if you set it) — don't use it for sensitive data until you trust the code; (3) if you need actual valuation calculations, verify that the tool implements them (test it on known examples) or prefer a package from a known source/homepage. Because the provided script was truncated, there's uncertainty about omitted behavior; obtaining and auditing the full source would reduce that uncertainty.

Like a lobster shell, security has layers — review code before you run it.

Current versionv2.0.0
Download zip
latestvk97f3ezchepn2mhhssv2g2fvt9830kkv

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Valuation

Valuation toolkit — DCF models, comparable analysis, revenue multiples, and projections.

Commands

CommandDescription
valuation helpShow usage info
valuation runRun main task
valuation statusCheck state
valuation listList items
valuation add <item>Add item
valuation export <fmt>Export data

Usage

valuation help
valuation run
valuation status

Examples

valuation help
valuation run
valuation export json

Output

Results go to stdout. Save with valuation run > output.txt.

Configuration

Set VALUATION_DIR to change data directory. Default: ~/.local/share/valuation/


Powered by BytesAgain | bytesagain.com Feedback & Feature Requests: https://bytesagain.com/feedback

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…