v1.0.0

港股 AI 概念板块专属投研顾问。结合宏观流动性、南向资金博弈与 AI 产业基本面，提供深度的个股挖掘与风控策略。

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 5:49 AM.

Analysis

This is an instruction-only Hong Kong AI-sector stock research skill with no code or install steps, but users should notice its optional API-key, file-read, external-data, and investment-advice implications.

GuidanceBefore installing, decide whether you are comfortable with a finance-focused assistant that may use external market sites, optional API keys, and read-only local file access if your environment grants it. Treat its stock analysis as research assistance, not guaranteed or licensed investment advice.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityLowConfidenceHighStatusNote

SKILL.md

network_access: ["hkex.com.hk", "aastocks.com", "finance.yahoo.com", "futu5.com"]
file_system: "read_only"

The skill declares external finance-site access and broad read-only file access. External data is expected for investment research, but local file access is not further scoped to specific user-provided documents.

User impactIf granted, the agent may fetch market data from listed sites and may be able to inspect local files while preparing analysis.

RecommendationLimit file access to documents you intentionally provide for analysis, and verify important market data against trusted sources.

Human-Agent Trust Exploitation

SeverityLowConfidenceHighStatusNote

SKILL.md

拥有 15 年经验的港股对冲基金科技大组首席研究员（CIO级别）...“等待右侧放量突破 XX 港元后建仓”

The prompt uses a strong expert-authority persona and asks for actionable trading plans. This is aligned with the stated stock-research purpose, but could make users over-trust outputs despite the included disclaimer.

User impactUsers could treat generated analysis as expert financial advice and make trades that affect their money.

RecommendationUse the output as one input to your own research, check primary sources, and consult a licensed financial professional before making investment decisions.

Permission boundary

Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.

Identity and Privilege Abuse

SeverityLowConfidenceHighStatusNote

SKILL.md

environment_variables: ["MARKET_DATA_API_KEY", "OPENAI_API_KEY"]

The skill declares potential access to API-key environment variables. This is plausible for market-data/model-backed research, but API keys can carry account quota, billing, or data-access privileges.

User impactIf you provide these keys, the agent may be able to use associated accounts or quotas while performing research.

RecommendationOnly provide keys that are necessary, prefer restricted/read-only market-data keys, and avoid sharing unrelated account credentials.