A Share Dashboard
ReviewAudited by ClawScan on May 10, 2026.
Overview
The stock dashboard is mostly purpose-aligned, but it runs an undeclared helper script from a hard-coded local skill path, so it should be reviewed before use.
Before installing or running this dashboard, inspect the referenced a-share-stock-dossier helper script and verify its source. Run it in a controlled environment, and avoid entering sensitive portfolio details unless you are comfortable with the local code and data sources involved.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Opening or refreshing the dashboard can run code from an unreviewed local skill if that path exists; its network access, file access, or other behavior is not visible in the supplied artifacts.
The dashboard executes a Python helper from another hard-coded local skill path. That helper is not included in the reviewed manifest or declared in the install metadata, so its provenance and behavior are outside this review.
SNAPSHOT_SCRIPT = "/home/c1/.openclaw/workspace/skills/a-share-stock-dossier/scripts/a_share_snapshot.py" ... result = subprocess.run(cmd, capture_output=True, text=True, timeout=60)
Review or supply the referenced helper script before running this skill. Prefer bundling the helper, pinning its source/version, making the path configurable, and clearly declaring the dependency in the skill requirements.