Skill

PassAudited by ClawScan on May 1, 2026.

Overview

The skill appears to do what it says: perform M&A due diligence using public filings, with disclosed local scripts, package installs, and an optional EDINET API key.

This skill is reasonable to install if you want an AI assistant for M&A due diligence. Be aware that it may install Python packages, run included local scripts, download public EDINET filings, process PDFs you provide, and write local output files. If you use automatic EDINET fetching, provide an EDINET_API_KEY only in an environment you trust.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill can download public filings, parse PDFs, and write local report files when used for analysis.

Why it was flagged

The workflow directs local Python helper execution to fetch filings and write output files. This is expected for the due-diligence purpose, but users should notice that the agent may run local scripts and create files.

Skill content
python3 $SKILL_DIR/scripts/fetch_edinet.py --company "会社名" --output ./data
Recommendation

Use it on intended companies and files only, and choose output directories that do not overwrite important data.

What this means

If automatic EDINET fetching is used, the skill will use the user’s EDINET API key to request public filing data.

Why it was flagged

The EDINET download helper reads an API subscription key from the environment. This is purpose-aligned for EDINET access and no hardcoding or leakage is shown.

Skill content
api_key = os.environ.get("EDINET_API_KEY", "")
Recommendation

Set EDINET_API_KEY only if you want automatic EDINET downloads, and manage the key like any other API credential.

What this means

Future installs may receive newer dependency versions than the author tested.

Why it was flagged

The skill installs external Python dependencies without version pins. The packages match the stated PDF/API/Excel functionality, but unpinned dependencies can change over time.

Skill content
"install":[{"type":"uv","packages":["httpx","pdfplumber","openpyxl"]}]
Recommendation

For higher assurance, install in an isolated environment and consider pinning or reviewing dependency versions.