multi-factor-strategy

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: multi-factor-strategy Version: 1.0.0 The skill bundle is classified as benign. Its content, including the `skill.md` instructions, is entirely focused on guiding users to create multi-factor stock selection strategies using the `quantcli` tool. There is no evidence of intentional harmful behavior such as data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts designed to subvert the agent's purpose. The instructions to install `quantcli` via `pip install` or `git clone` from `gitcode.com` are standard methods for acquiring a CLI tool and are directly aligned with the skill's stated purpose, without introducing any direct malicious code or instructions within the skill bundle itself.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the referenced tool could run third-party code on the user's machine if they choose to follow the setup instructions.

Why it was flagged

The skill instructs users to install or clone an external QuantCLI tool without a pinned version in the artifact. This is aligned with the skill's purpose, but it introduces normal third-party package/source trust considerations.

Skill content
pip install quantcli ... git clone https://gitcode.com/datavoid/quantcli.git
Recommendation

Install QuantCLI only from a trusted source, consider pinning a known version, and review the package/source before using it for strategy execution.