SASAC Performance Analyst
PassAudited by ClawScan on May 17, 2026.
Overview
The skill appears to be a purpose-aligned financial benchmarking/reporting assistant, with some user-noticeable external-output and packaging-completeness caveats.
This skill looks generally safe for SASAC-style financial benchmarking, but treat company financials and prospectuses as sensitive. Use local HTML/PDF outputs when possible, verify any Tencent Docs or external API workflow before sharing data, and review any missing helper scripts or dependencies before running code from the repository.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Some documented functionality may be missing or may require code from outside the reviewed artifact set.
The package metadata references helper files that are not present in the supplied file manifest, while the manifest only shows two code files under tools. This suggests incomplete packaging or incomplete review context for some advertised features.
"files": [ ... "tools/financial_data_extractor.py", "tools/hk_ipo_integration.py", "tools/report_generator.py", "templates/report_template.html" ... ]
Install only from the trusted repository or ClawHub package, and verify any additional helper files before running them.
Confidential financial metrics or draft listing materials could be exposed to external services if the user chooses cloud-document or external-source workflows.
The documentation describes external data sources and optional Tencent Docs output. This is purpose-aligned for financial reporting, but it may involve sending or storing enterprise financial information outside the local environment if those features are used.
"Report Generation" | "Comprehensive evaluation reports (HTML/PDF/Tencent Docs)" and "Data Acquisition → CnInfo API ... HKEX Prospectus ... Manual Input"
Before generating cloud documents or using external integrations, confirm what data will be sent, who can access the output, and whether the data is approved for sharing.