Back to skill
Skillv1.0.0
ClawScan security
News Event Driven Analysis · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 14, 2026, 9:45 AM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only event-driven news analysis tool for equity markets and its requested capabilities (none) align with its stated purpose.
- Guidance
- This skill appears internally consistent and low-risk: it only provides instructions and reference templates and does not request credentials or install code. Before installing, consider: (1) the skill uses a web_search tool — confirm your agent's web_search behavior and what data it may send to search providers; (2) the skill asks users to paste news/announcements when needed — do not paste private or sensitive documents you wouldn't want transmitted; (3) outputs are analytic guidance, not certified investment advice — treat recommendations as informational and verify with your own research or a licensed advisor. If you do not want the skill to run autonomously, disable autonomous invocation in your agent settings.
Review Dimensions
- Purpose & Capability
- okName and description match the SKILL.md and reference files: the skill describes news-driven policy/company/industry/event analysis for stocks and does not request unrelated binaries, credentials, or config paths.
- Instruction Scope
- noteRuntime instructions require performing a web_search for up-to-date news and then applying an explicit 4-step analysis framework. The instructions do not ask the agent to read local files, environment variables, or to send data to unknown external endpoints. Note: the skill expects use of a web_search tool and also provides templates asking users to paste news/announcements (which could include proprietary text supplied by the user).
- Install Mechanism
- okNo install spec and no code files — instruction-only. Nothing is written to disk or fetched at install time, minimizing install-time risk.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths. This is proportionate for a news-analysis/instruction-only skill.
- Persistence & Privilege
- okalways is false and the skill does not request elevated or persistent privileges or modify other skills' configs. It can be invoked autonomously (platform default), which is expected for skills of this type.