Edgar Crawler

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill is advertised as a SEC EDGAR filing crawler, but its instructions largely describe an unrelated ZVT/A-share quant and trading workflow with broker/account options and undeclared setup commands.

Review this skill carefully before installing. If you only need SEC EDGAR 10-K/10-Q downloads, the included ZVT, A-share, broker, and trading-execution instructions are out of scope. Do not provide broker or paid-provider credentials, and do not run the ZVT setup commands unless you explicitly want that separate workflow and trust the dependency.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user expecting only SEC filing downloads may instead be guided into unrelated market-data, quant-strategy, or trading workflows.

Why it was flagged

The public description promises SEC EDGAR filing collection, but the operating questions shift to A-share/HK/crypto markets and ZVT-style strategy work, creating a material purpose mismatch.

Skill content
description: 从 SEC EDGAR 批量抓取上市公司年报(10-K)和季报(10-Q)文件 ... What I'll Ask You - Target market: A-share (default), HK, or crypto?
Recommendation

Treat the skill as needing manual review before use; install only if you actually want the ZVT/quant workflow and not just EDGAR filing retrieval.

What this means

The agent could steer work toward creating or running trading workflows rather than only collecting filings, increasing financial and account-impact risk.

Why it was flagged

The skill includes trading execution in its workflow even though its advertised purpose is SEC filing crawling; trading actions are high-impact and need explicit scoping and user approval.

Skill content
Pipeline

`data_collection -> data_storage -> factor_computation -> target_selection -> trading_execution -> visualization`
Recommendation

Require explicit user confirmation before any broker, trading, order-generation, or execution-related step, and separate EDGAR crawling from trading automation.

What this means

Users could be prompted to involve paid data accounts or broker environments beyond what the EDGAR crawler description suggests.

Why it was flagged

The skill asks about paid account and broker-backed providers that are not necessary for public SEC EDGAR downloads and are not reflected in the declared credential requirements.

Skill content
Data source / provider: eastmoney (free, no account), joinquant (account+paid), baostock (free, good history), akshare, or qmt (broker)?
Recommendation

Do not provide broker, wallet, paid-provider, or sensitive account credentials unless the skill’s scope is corrected and the credential purpose is clearly declared.

What this means

Following the setup guidance may install and run third-party code that was not declared in the skill’s install metadata and is not clearly needed for EDGAR crawling.

Why it was flagged

The registry says this is an instruction-only skill with no install spec, yet a reference file directs installation and execution of an external Python package for an unrelated ZVT workflow.

Skill content
PC-01: `python3 -c 'import zvt; print(zvt.__version__)'` → on_fail: Run: python3 -m pip install zvt then re-run: python3 -m zvt.init_dirs
Recommendation

Avoid running the ZVT install/init commands unless you intentionally trust that package and confirm it is required for your task.