Scenario Analyzer

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: scenario-analyzer Version: 0.1.0 The OpenClaw AgentSkills skill bundle is designed to analyze news headlines and generate investment scenarios. All files, including the `SKILL.md` instructions, are clearly aligned with this stated purpose. The agent is instructed to perform `WebSearch` for news gathering and to write a report to a dedicated `reports/` directory, explicitly prohibiting saving to the project root. These capabilities are necessary for the skill's function and are not indicative of malicious intent or high-risk behavior beyond the stated purpose. No evidence of data exfiltration, malicious execution, persistence, or prompt injection to subvert the agent's core mission was found.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill may query external web information and create a local Markdown report file.

Why it was flagged

The skill instructs the agent to use WebSearch and save an output file. These tool actions are disclosed, scoped to the analysis workflow, and do not show hidden or destructive behavior.

Skill content
1. WebSearchで過去2週間の関連ニュースを収集 ... 保存先: `reports/scenario_analysis_<topic>_YYYYMMDD.md`
Recommendation

Use it with headlines you are comfortable analyzing through web-backed tools, and review the generated report before relying on any investment conclusions.

What this means

The headline and generated analysis may be shared between the named subagents during the workflow.

Why it was flagged

The skill explicitly passes the user headline and full primary analysis to a second review agent. This is central to the stated design and is not hidden, but it is still an inter-agent data flow users should notice.

Skill content
2つの専門エージェント(`scenario-analyst`と`strategy-reviewer`)を順次呼び出し ... [scenario-analystの出力全文]
Recommendation

Avoid entering confidential market-sensitive information unless you are comfortable with that information being used across the disclosed subagent workflow.

What this means

You have limited publisher/source context, but there is no supplied code package to install or run.

Why it was flagged

The registry does not provide a source repository or homepage, which limits provenance review. However, the artifacts contain no executable code or install-time dependency.

Skill content
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Recommendation

Prefer installing from trusted publishers, and treat the generated investment analysis as advisory rather than authoritative.