US Stock Valuation Model - Value Investing Framework / 美股估值模型-价值投资框架

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: us-value-investing-framework Version: 1.1.0 The skill bundle is benign. The `SKILL.md` clearly defines the purpose of a US stock valuation model and provides a `run` command that executes a local Python script (`scripts/evaluate_company.py`) with local input and output files. The Python script performs purely computational tasks based on the provided JSON input, writing results to specified local JSON and Markdown files. There are no signs of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the agent. All file operations are local and aligned with the stated purpose of processing financial data.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used, the agent or user may run bundled local code and create result files in the workspace.

Why it was flagged

The skill documents a local Python script run that reads a JSON input and writes local result files; this is disclosed and central to the valuation purpose.

Skill content
python3 scripts/evaluate_company.py --input references/input-template.json --out .state/eval.json --markdown .state/eval.md
Recommendation

Run it only in the intended workspace and review or adjust the input/output paths before using real financial data.