finance-analyzer

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is coherent for analyzing user-provided financial spreadsheets, with disclosed local script execution and a normal but unpinned Python dependency install step.

This looks appropriate for analyzing financial spreadsheets. Before installing, use a trusted Python environment, be aware that the spreadsheet contents may include sensitive business information, and only save JSON output to paths you intentionally choose.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing dependencies can modify the local Python environment and depends on the trustworthiness of the packages fetched.

Why it was flagged

The setup step installs third-party Python packages without pinned versions. This is common and purpose-aligned for spreadsheet analysis, but users should install from a trusted package index/environment.

Skill content
pip install pandas openpyxl
Recommendation

Use a virtual environment, install from trusted sources, and consider pinning known-good versions of pandas and openpyxl.

What this means

The skill will run local code to parse the spreadsheet the user chooses.

Why it was flagged

The skill directs execution of its bundled Python analysis script. This is disclosed and central to the skill's stated purpose, with no artifact evidence of hidden network calls, credential use, or destructive behavior.

Skill content
python3 {SKILL_DIR}/scripts/analyze_financials.py <file_path>
Recommendation

Run it only on files you intend to analyze, and review any optional output path before saving results.