Back to skill
Skillv1.0.0
ClawScan security
Stock Recommend By News 股票推荐-支持 A股、港股、美股 · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 11, 2026, 3:33 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill's requested resources and runtime instructions match its stated purpose (news-driven stock-movement analysis) and it does not ask for unrelated credentials, installs, or system access.
- Guidance
- This skill appears coherent and does not request extra privileges, but remember: (1) it relies on web search results and the model's analysis — verify the linked news sources yourself before acting, (2) outputs are informational and not financial advice despite the predictive wording, (3) watch for hallucinated or misattributed links and cross-check facts, and (4) if you are concerned about an agent autonomously invoking skills, review the platform's autonomy controls before enabling it.
Review Dimensions
- Purpose & Capability
- okThe name/description (news-based stock movement predictions) aligns with the SKILL.md: it instructs the agent to search recent international news, analyze market impact per region, and produce a formatted report. It does not request unrelated credentials, binaries, or config paths.
- Instruction Scope
- okRuntime instructions are narrowly scoped to web searches for recent news, region-specific analysis heuristics, and producing a structured output with links. The SKILL.md does not instruct reading local files, harvesting environment variables, or sending data to unexpected external endpoints beyond web search results and linked news sources.
- Install Mechanism
- okThere is no install spec and no code files (instruction-only), so nothing is written to disk or downloaded during install — this is the lowest-risk pattern.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths. That is proportionate for a news-aggregation and analysis skill.
- Persistence & Privilege
- okalways is false and the skill does not request persistent system-level privileges or modifications to other skills. Note: autonomous invocation (model invoking the skill when eligible) is platform default and not a concern here by itself.