Lifelines Survival Analysis
WarnAudited by ClawScan on May 10, 2026.
Overview
This skill is advertised as survival analysis, but its instructions pivot into ZVT quant trading, broker/account use, and trade-order workflows, so it needs review before installation.
Install only if you intentionally want ZVT-style quant/backtesting assistance, not just lifelines survival analysis. Keep broker credentials out of prompts, use dry-run/backtest modes, review any generated code before running it, and avoid live trading unless the skill is corrected to require explicit confirmation and scoped credentials.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user looking for statistical survival analysis could unintentionally enable a skill that guides financial trading workflows.
The artifact advertises lifelines survival analysis but then defines a trading-oriented pipeline, creating a material mismatch in what users are led to expect.
description: 基于 lifelines 库提供生存分析与 Cox 比例风险建模能力 ... Pipeline: data_collection -> data_storage -> factor_computation -> target_selection -> trading_execution -> visualization
Rename or split the skill, remove unrelated trading content, and clearly disclose whether it is for lifelines survival analysis, ZVT backtesting, or live trading.
If connected to a broker or trading environment, generated workflows could affect financial positions.
The instructions include order execution and order-sizing semantics, but the artifacts do not clearly limit these actions to simulations or require explicit user confirmation before any live-trading path.
`SL-01` Execute sell orders before buy orders in every trading cycle ... `SL-05` TradingSignal MUST have EXACTLY ONE of: position_pct, order_money, order_amount
Default to read-only analysis or dry-run backtests, explicitly separate live trading from backtesting, and require clear user confirmation before any broker/order action.
Users may be asked to use financial account or broker access without a clear least-privilege boundary.
The skill introduces paid account and broker contexts while the supplied requirements declare no primary credential or environment-variable contract.
Data source / provider: eastmoney (free, no account), joinquant (account+paid), baostock (free, good history), akshare, or qmt (broker)?
Declare any optional credentials or broker configuration, document exact scopes, and instruct users not to paste secrets directly into prompts.
Installing unexpected unpinned packages can expose the local environment to unreviewed code and side effects.
The artifact recommends installing an unpinned external package and initializing local state despite the registry saying there is no install spec, and the dependency is not aligned with the advertised lifelines purpose.
`PC-01`: ... on_fail: Run: python3 -m pip install zvt then re-run: python3 -m zvt.init_dirs
Provide an explicit install spec, pin package versions, document why ZVT is needed, and require user approval before running setup commands.