v1.0.0

Claw Stock

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:38 AM.

Analysis

This is an instruction-only stock-analysis skill with no code or credentials, but users should verify financial data and not over-rely on its confident expert framing.

GuidanceThis skill does not appear to run code or request credentials. Before installing, understand that it is a finance-analysis prompt with strong expert-style language; verify current prices, filings, and market data independently, and treat its conclusions as educational rather than investment instructions.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Human-Agent Trust Exploitation

SeverityLowConfidenceHighStatusNote

SKILL.md

你是一名经验极其丰富的资深股票分析师...能随时调取任何公司的经营数据、历史估值、行业对比和市场情绪

The skill uses strong authority and data-access wording for financial analysis even though no market-data source or tool is declared. The repeated disclaimer reduces the concern, but users should not assume the output is current or authoritative.

User impactA user could place too much trust in the analysis or scoring when making investment decisions.

RecommendationTreat outputs as educational analysis only, verify all market data against reliable sources, and do not use the score as the sole basis for trades.

Agentic Supply Chain Vulnerabilities

SeverityInfoConfidenceHighStatusNote

metadata

Source: unknown; Homepage: https://github.com/your-org/claw-stock

The package has unclear provenance and a placeholder-looking homepage. Because it is instruction-only with no install script or code files, this is a low-level notice rather than a material security concern.

User impactUsers have limited provenance information to confirm who maintains the skill or where updates come from.

RecommendationPrefer skills with a real, verifiable source repository and maintainer information, especially for finance-related workflows.