Edgar Crawler
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill is advertised as a SEC EDGAR filing crawler, but its instructions largely describe an unrelated ZVT/A-share quant and trading workflow with broker/account options and undeclared setup commands.
Review this skill carefully before installing. If you only need SEC EDGAR 10-K/10-Q downloads, the included ZVT, A-share, broker, and trading-execution instructions are out of scope. Do not provide broker or paid-provider credentials, and do not run the ZVT setup commands unless you explicitly want that separate workflow and trust the dependency.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user expecting only SEC filing downloads may instead be guided into unrelated market-data, quant-strategy, or trading workflows.
The public description promises SEC EDGAR filing collection, but the operating questions shift to A-share/HK/crypto markets and ZVT-style strategy work, creating a material purpose mismatch.
description: 从 SEC EDGAR 批量抓取上市公司年报(10-K)和季报(10-Q)文件 ... What I'll Ask You - Target market: A-share (default), HK, or crypto?
Treat the skill as needing manual review before use; install only if you actually want the ZVT/quant workflow and not just EDGAR filing retrieval.
The agent could steer work toward creating or running trading workflows rather than only collecting filings, increasing financial and account-impact risk.
The skill includes trading execution in its workflow even though its advertised purpose is SEC filing crawling; trading actions are high-impact and need explicit scoping and user approval.
Pipeline `data_collection -> data_storage -> factor_computation -> target_selection -> trading_execution -> visualization`
Require explicit user confirmation before any broker, trading, order-generation, or execution-related step, and separate EDGAR crawling from trading automation.
Users could be prompted to involve paid data accounts or broker environments beyond what the EDGAR crawler description suggests.
The skill asks about paid account and broker-backed providers that are not necessary for public SEC EDGAR downloads and are not reflected in the declared credential requirements.
Data source / provider: eastmoney (free, no account), joinquant (account+paid), baostock (free, good history), akshare, or qmt (broker)?
Do not provide broker, wallet, paid-provider, or sensitive account credentials unless the skill’s scope is corrected and the credential purpose is clearly declared.
Following the setup guidance may install and run third-party code that was not declared in the skill’s install metadata and is not clearly needed for EDGAR crawling.
The registry says this is an instruction-only skill with no install spec, yet a reference file directs installation and execution of an external Python package for an unrelated ZVT workflow.
PC-01: `python3 -c 'import zvt; print(zvt.__version__)'` → on_fail: Run: python3 -m pip install zvt then re-run: python3 -m zvt.init_dirs
Avoid running the ZVT install/init commands unless you intentionally trust that package and confirm it is required for your task.
