Skills/ClawHub/investment-framework-skill

investment-framework-skill@1.0.1

CAUTION· static only

Publisher claims: "［何时使用］当用户需要进行投资价值分析时；当用户询问"这家公司值得投资吗"时；当用户需要资产配置建议时；当用户想做投资决策但需要检查逻辑时；当用户想识别长期趋势和机会时；当用户需要评估市场经济专利时；当需要行业专用指标分析时" Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher lj22503 · publishing for 215 daysInstalls 1,489Last detonated 7d ago
What would fix thisWatchDispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-07 and scored it 66/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

MEDIUM
File permission modification commandasset-allocator/SKILL.md:628 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？(`chmod +x`) |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandbias-detector/SKILL.md:389 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？ | `chmod +x scripts/*.py` |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandSKILL.md:936 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？(`chmod +x`) |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandchina-masters/duan-yongping/SKILL.md:291 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？ | `chmod +x scripts/*.py` |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandchina-masters/wu-jun/SKILL.md:125 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？ | `chmod +x scripts/*.py` |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandchina-masters/li-lu/civilization-analyzer/SKILL.md:156 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？ | `chmod +x scripts/*.py` |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandchina-masters/qiu-guolu/quality-analyzer/SKILL.md:156 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？ | `chmod +x scripts/*.py` |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commanddecision-checklist/SKILL.md:395 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？(`chmod +x`) |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandglobal-allocator/SKILL.md:311 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？ | `chmod +x scripts/*.py` |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandchina-masters/duan-yongping/culture-analyzer/SKILL.md:160 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？ | `chmod +x scripts/*.py` |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandchina-masters/li-lu/SKILL.md:201 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？ | `chmod +x scripts/*.py` |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
Python subprocess execution detectedchina-masters/wu-jun/ai-trend-analyzer/scripts/analyze-ai.py:52 · Python subprocess execution detectedproc_result = subprocess.run(cmd, capture_output=True, text=True, timeout=15)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File permission modification commandchina-masters/li-lu/china-opportunity/SKILL.md:160 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？ | `chmod +x scripts/*.py` |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandchina-masters/qiu-guolu/SKILL.md:286 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？ | `chmod +x scripts/*.py` |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandchina-masters/qiu-guolu/valuation-analyzer/SKILL.md:145 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？ | `chmod +x scripts/*.py` |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandchina-masters/duan-yongping/longterm-checker/SKILL.md:168 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？ | `chmod +x scripts/*.py` |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandindustry-analyst/SKILL.md:353 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？ | `chmod +x scripts/*.py` |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandchina-masters/wu-jun/ai-trend-analyzer/SKILL.md:162 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？ | `chmod +x scripts/*.py` |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandfuture-forecaster/SKILL.md:569 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？(`chmod +x`) |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
Python subprocess execution detectedfuture-forecaster/scripts/forecast-future.py:56 · Python subprocess execution detectedproc_result = subprocess.run(cmd, capture_output=True, text=True, timeout=15)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedcycle-locator/scripts/analyze-cycle.py:53 · Python subprocess execution detectedproc_result = subprocess.run(cmd, capture_output=True, text=True, timeout=10)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File permission modification commandchina-masters/wu-jun/data-driven-investor/SKILL.md:158 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？ | `chmod +x scripts/*.py` |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandcycle-locator/SKILL.md:326 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？ | `chmod +x scripts/*.py` |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandscripts/add-troubleshooting.py:18 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？ | `chmod +x scripts/*.py` |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandportfolio-designer/SKILL.md:377 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？ | `chmod +x scripts/*.py` |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandvalue-analyzer/SKILL.md:541 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？(`chmod +x`) |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandmoat-evaluator/SKILL.md:458 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？(`chmod +x`) |Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST05
MEDIUM
Python subprocess execution detectedindustry-analyst/scripts/analyze-industry.py:53 · Python subprocess execution detectedproc_result = subprocess.run(cmd, capture_output=True, text=True, timeout=10)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File permission modification commandstock-picker/SKILL.md:368 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？ | `chmod +x scripts/*.py` |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandsecond-level-thinker/SKILL.md:339 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？ | `chmod +x scripts/*.py` |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandintrinsic-value-calculator/SKILL.md:666 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？(`chmod +x`) |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandsimple-investor/SKILL.md:328 · File permission modification command — agent changes file ownership/permissions| 运行失败 | 脚本有执行权限吗？ | `chmod +x scripts/*.py` |Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05

Cost to the agent

Instructions loaded
≈43,905 tok
32 files · 272 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

14 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim lj22503: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. File permission modification command≈ +2 on the totalRequest the narrowest permission that works; replace wildcards with the exact paths or hosts.
  3. Python subprocess execution detected≈ +2 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim lj22503Propose a patch to the maintainer