70High
The skill provides financial advice and uses web search,
Behavior Analysis
Mismatch detected — The skill's description states it analyzes 'Chinese stock prices (A-shares, HK stocks)', but its 'Supported Markets' section explicitly includes US stocks.
Claims to do
Stock Analysis: Analyze stock price movements and provide investment recommendations.
Actually does
The skill performs web searches using specific query formats (e.g., "{股票名称} 股价 今日" or "{TICKER} stock price today") to gather current stock price data, recent news, industry trends, and market sentiment for A-shares, Hong Kong, and US stocks. It then structures this information into an analysis with core data, technical analysis, and investment recommendations (buy/hold/sell) based on predefined guidelines.
Skill Info
Namepaulshe/china-stock-analysis
Registryclawhub
Version1.0.0
PURLpkg:clawhub/paulshe/china-stock-analysis@1.0.0
Stars40
Downloads16,602
Installs187
Source
SHA-256274b88c93b57...
SHA-13330cc71a480...
MD5b871f6d546be...
TLSH844189667df1...
Size2,107 bytes
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
ClawHubDocs
openclaw skills install paulshe/china-stock-analysisAssessments (2)
AI Agent Traps ↗Skill provides investment recommendationshighfinancial action
The skill is explicitly designed to provide 'Buy/Hold/Sell' investment recommendations, which constitutes a high-impact financial action with potential real-world consequences for users.
100% confidenceline 51
建议：买入/持有/卖出
Web search capability for data gatheringmediumreconnaissance
The skill utilizes web search to gather stock data and context. This capability could be exploited for prompt injection into the search query or for unauthorized reconnaissance if user input is not properly sanitized.
80% confidenceline 26
Search for current price data using web search
Local file reference for stock codeslowreconnaissance
The skill references a local Markdown file (`references/china-stocks.md`) for stock codes. This indicates file access capabilities that could potentially be abused for path traversal or reading other local files if the agent's file access is not properly sandboxed.
70% confidenceline 82
[references/china-stocks.md]
Description Mismatchinfodescription mismatch
The skill's description states it analyzes 'Chinese stock prices (A-shares, HK stocks)', but its 'Supported Markets' section explicitly includes US stocks.
85% confidence
Description: 'Analyze Chinese stock prices (A-shares, HK stocks)'. Supported Markets table includes 'US | TICKER | AAPL, TSLA, NVDA'.
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/clawhub/paulshe/china-stock-analysis)HTML
<a href="https://mondoo.com/ai-agent-security/skills/clawhub/paulshe/china-stock-analysis"><img src="https://mondoo.com/ai-agent-security/api/badge/clawhub/paulshe/china-stock-analysis.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/clawhub/paulshe/china-stock-analysis.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow