High Risknot manually reviewedcatalog importevidence: source-scanned

finance-news

Market news briefings with AI summaries. Use when asked about stock news, market updates, portfolio performance, morning/evening briefings, financial headlines, or price alerts. Supports US/Europe/Japan markets, WhatsApp delivery, and English/German output.

overall score

Publisher

kesslerio

Version

source-scanned

Updated

2026-03-15

Tags

communicationawesome-indexcatalog-only

+ 1 more

Potentially suspicious implementation signals detected: rm -rf, password.

Install decision: Review-first install: functionality-v2 found trouble.

Caution signal

Suspicious signals detected

Review state

Static analysis only

Evidence points

Capability surface

6 capability signals

evidence snapshotbaseline safety checks passedfollow-on functionality checks failedno manual review yetsource-scanned evidence

Top row only: current live test result, deeper follow-on result, review presence, and evidence level. Each runtime badge is a quick human summary, not just an internal lane name.

Fresh runtime neighbors Stale runtime neighbors

✉️ Quick review

✉️ Review postcard

RatioDaemon on finance-news

🕵️ expected proof signal was missing🚫 skill exited with an error

Finance News looks aimed at market news briefings with AI summaries. Follow-on functionality checks currently show first observed failure, the trust label is High Risk, and setup looks advanced.

This note is generated from the latest receipts and refreshed when the testing engine touches the skill again.

RatioDaemon note

RatioDaemon on Finance News

Full commentary lives in the editorial lane so this skill page can stay focused on the evidence, setup guidance, and technical receipts.

Open full RatioDaemon note

Evidence strengthStronger evidence: source-level scan available

Evidence basisSource-aware static scan of the upstream skill repo

Current runtime resultFailed follow-on functionality checks, which means the test engine found a concrete problem in this lane. That is evidence worth reading, not a vague bad vibe.

baseline safety checks passed8/8 passedclean history

show baseline lane summary

Baseline-v3: the generic safety lane. This is where source-mount, write-boundary, network-denial, fake-env, secret-path, and docker-socket checks live.

Failure confidence: Currently passing with no earlier failed rows recorded for this suite.

📦 Source mountpassed

Makes sure the skill source actually appears inside the isolated test environment, so the rest of the run is testing the real files rather than failing on setup.

🔒 Source write guardpassed

Checks that the skill cannot modify its mounted source files during the run. That matters because a test should observe the code, not let it rewrite the evidence.

📝 Workspace writepassed

Checks that the skill can write only in the temporary workspace it is supposed to use, not elsewhere in the environment.

🌐 Hostname network denialpassed

Checks that ordinary outbound network requests by hostname are blocked. A pass suggests the sandbox really is limiting internet access.

🧱 Raw-IP network denialpassed

Checks that direct network requests by raw IP are also blocked, so the skill cannot sidestep the hostname block with a simpler network trick.

🧪 Fake-env handlingpassed

Injects canary credentials and watches what the skill does with them. This helps catch skills that echo, leak, or mishandle sensitive-looking values.

🗝️ Secret-path isolationpassed

Checks that obvious host secret locations are not visible in the sandbox. A pass is reassuring, but it does not prove every possible secret location is covered.

🐳 Docker socket denialpassed

Checks that the container cannot touch the host Docker socket, which would otherwise be a dangerous path to broader control of the machine.

follow-on functionality checks failed15/17 passedfirst failed run seen for this lane

show follow-on lane summary

functionality-v2: the adaptive follow-on lane layered on top of baseline-v3. It only checks the file types this repo actually contains, then adds higher-signal sanity like manifest identity, package entrypoints, docs links, fixtures, and language-aware smoke tests when those surfaces exist.

Failure confidence: Freshly observed failure: no earlier pass or fail rows exist for this suite.

🧭 skill structure🪪 _meta.json shape🧬 _meta.json identity🧾 json parse🐚 shell syntax🐍 python syntax🟢 node syntax🧪 yaml parse🧪 yaml parse🧪 yaml parse🧪 yaml parse🧪 yaml parse🧮 csv parse📚 pyproject parse📋 requirements.txt shape🐍 python help smoke🔗 docs link integrity

Jump to technical runtime details

Before you install

✅ Good fit if...

You are specifically looking for communication / awesome-index workflows.

🧰 Before you install...

Expect setup work: this skill references 12 env vars.
Assume outside service calls are part of the story: 12 external domain references showed up.
Expect local command execution or subprocess behavior, not just polite in-memory logic.

⚠️ Watch out for...

functionality-v2 found trouble, so treat this like a review-first install instead of a casual click.
Suspicious signals are present; this is not just a broader capability surface doing ordinary work.
The capability surface is non-trivial: this skill touches higher-privilege or higher-impact areas.

Why this label

This landed in High Risk because suspicious patterns or dangerous signal combinations outweighed ordinary provenance and utility clues.

Uncertainty: Source-level evidence helps, but this is still largely static-analysis-first unless a manual review is present.

Evidence strengthStronger evidence: source-level scan available

Suspicious signals2

Higher-impact signals4

Env / secret refs12

Network refs12

Shell signals5

Capability surface and suspicious signals

Capability surface

These increase access or impact, but they are not the same thing as deceptive or malicious behavior.

env vars: 12external refs: 12shell / subprocess usefile write signalsbrowser automationhigher-impact domains

Capability summary

Requires secrets or environment variables to unlock full functionality.References external services or network endpoints.Can invoke shell commands or subprocess-style behavior.

+ 3 more

Suspicious behaviors

These are the signals that count much more heavily against the score.

suspicious signals detected

Suspicious implementation patterns detected: rm -rf, password.

Evidence

Env vars

AAPLABNBACTIVATE_SCRIPT

+ 9 more

Domains

addons.mozilla.org/en-US/firefox/addon/cookie-quick-managerchrome.google.com/webstore/detail/editthiscookieconsole.developers.google.com/apis/api/sheets.googleapis.com/overview?project=831892255935

+ 9 more

Binaries

ghpythonnode

+ 3 more

Shell signals

exec(subprocessbash

+ 2 more

Suspicious

rm -rfpassword

Read this section in two layers: capability surface shows what the skill can touch, while suspicious signals show what looks deceptive or riskier than ordinary integrations.

🧪 Technical runtime details

baseline safety checks passedtested 2026-03-14 01:00 UTC8 of 8 baseline-v3 checks passedsuite: baseline-v3suite version: baseline-v3harness: 2026-03-13dclassification: passed

This is the raw runtime layer: baseline-v3 first, then the follow-on lane when available. The postcard above is the fast read; the receipts below are the technical view.

🛠 functionality-v2

This is the follow-on adaptive lane: source-aware smoke checks for the file types actually present in this skill after it already cleared baseline-v3. Depending on the repo shape, that can include manifest identity, package entrypoints, docs-link integrity, shipped fixture validation, and real help-smoke runs.

status: failed15 / 17 passedsuite: functionality-v2harness: 2026-03-13p

Selection reasonuntested

Failure confidenceFreshly observed failure: no earlier pass or fail rows exist for this suite.

Source fingerprint1a429e80664b2aa796a44d05843e4528c30d5c02e1759a51808b540bde7d70d5

Baseline dependencybaseline-v3

Profile labelsjson, shell, python, node, markdown, yaml, csv, meta-json, pyproject, requirements, python-help

🧭 skill structurestatus: passedpassedexit 0235 ms

tap for adaptive receipts

Commandsh -lc test -s /source/SKILL.md && grep -Eq "^#{1,6} " /source/SKILL.md && echo skill-structure-ok

Observed stdoutskill-structure-ok

Observed stderr—

Workspace artifacts0

🪪 _meta.json shapestatus: passedpassedexit 0238 ms

tap for adaptive receipts

Command

node -e const fs=require("fs"); const files=process.argv.slice(1); for (const file of files) { const meta=JSON.parse(fs.readFileSync(file, "utf8")); if (!meta || Array.isArray(meta) || typeof meta !== "object") throw new Error(`${file}: _meta.json must be an object`); if (typeof meta.owner !== "string" || !meta.owner) throw new Error(`${file}: owner missing`); if (typeof meta.slug !== "string" || !meta.slug) throw new Error(`${file}: slug missing`); if (!meta.latest || typeof meta.latest !== "object") throw new Error(`${file}: latest missing`); if (typeof meta.latest.version !== "string" || !meta.latest.version) throw new Error(`${file}: latest.version missing`); if (typeof meta.latest.publishedAt !== "number") throw new Error(`${file}: latest.publishedAt missing`); } console.log(`meta-json-shape-ok:${files.length}`); /source/_meta.json

Observed stdoutmeta-json-shape-ok:1

Observed stderr—

Workspace artifacts0

🧬 _meta.json identitystatus: passedpassedexit 0240 ms

tap for adaptive receipts

Command

node -e const fs=require("fs"); const expectedOwner=process.argv[1]; const expectedSlug=process.argv[2]; const files=process.argv.slice(3); for (const file of files) { const meta=JSON.parse(fs.readFileSync(file, "utf8")); if (meta.owner !== expectedOwner) throw new Error(`${file}: owner mismatch ${meta.owner} !== ${expectedOwner}`); if (meta.slug !== expectedSlug) throw new Error(`${file}: slug mismatch ${meta.slug} !== ${expectedSlug}`); if (meta.history && !Array.isArray(meta.history)) throw new Error(`${file}: history must be an array`); for (const entry of meta.history || []) { if (typeof entry.version !== "string" || !entry.version) throw new Error(`${file}: history.version missing`); if (typeof entry.publishedAt !== "number") throw new Error(`${file}: history.publishedAt missing`); } } console.log(`meta-json-identity-ok:${files.length}`); kesslerio finance-news /source/_meta.json

Observed stdoutmeta-json-identity-ok:1

Observed stderr—

Workspace artifacts0

🧾 json parsestatus: passedpassedexit 0255 ms

tap for adaptive receipts

Command

node -e const fs=require("fs"); const files=process.argv.slice(1); for (const file of files) JSON.parse(fs.readFileSync(file, "utf8")); console.log(`json-parse-ok:${files.length}`); /source/_meta.json /source/config/config.json /source/config/manual_earnings.json /source/htmlcov/status.json

Observed stdoutjson-parse-ok:4

Observed stderr—

Workspace artifacts0

🐚 shell syntaxstatus: passedpassedexit 0223 ms

tap for adaptive receipts

Command

bash -lc for file do bash -n "$file"; done && echo shell-syntax-ok:$# functionality-shell /source/cron/alerts.sh /source/cron/earnings-weekly.sh /source/cron/earnings.sh /source/cron/evening.sh /source/cron/morning.sh /source/scripts/venv-setup.sh

Observed stdoutshell-syntax-ok:6

Observed stderr—

Workspace artifacts0

🐍 python syntaxstatus: passedpassedexit 0401 ms

tap for adaptive receipts

Command

python3 -c import ast, pathlib, sys; files=sys.argv[1:]; [ast.parse(pathlib.Path(file).read_text(encoding="utf-8"), filename=file) for file in files]; print(f"python-syntax-ok:{len(files)}") /source/scripts/alerts.py /source/scripts/briefing.py /source/scripts/earnings.py /source/scripts/fetch_news.py /source/scripts/portfolio.py /source/scripts/ranking.py /source/scripts/research.py /source/scripts/setup.py /source/scripts/stocks.py /source/scripts/summarize.py /source/scripts/translate_portfolio.py /source/scripts/utils.py /source/tests/test_alerts_extended.py /source/tests/test_alerts.py /source/tests/test_briefing.py /source/tests/test_earnings.py /source/tests/test_fetch_news.py /source/tests/test_portfolio.py /source/tests/test_ranking.py /source/tests/test_research.py /source/tests/test_setup.py /source/tests/test_stocks.py /source/tests/test_summarize.py

Observed stdoutpython-syntax-ok:23

Observed stderr—

Workspace artifacts0

🟢 node syntaxstatus: passedpassedexit 0241 ms

tap for adaptive receipts

Command

sh -lc for file do node --check "$file"; done && echo node-syntax-ok:$# functionality-node /source/htmlcov/coverage_html_cb_dd2e7eb5.js

Observed stdoutnode-syntax-ok:1

Observed stderr—

Workspace artifacts0

🧪 yaml parsestatus: passedpassedexit 0281 ms

tap for adaptive receipts

Commandeval . /source/workflows/alerts-cron.yaml

Observed stdout

# Price Alerts Workflow for Cron (No Approval Gate)
# Usage: lobster run --file workflows/alerts-cron.yaml --args-json '{"lang":"en"}'
#
# Schedule: 2:00 PM PT / 5:00 PM ET (1 hour after market close)
# Checks price alerts against current prices (including after-hours)

name: finance.alerts.cron
description: Check price alerts and send triggered alerts to WhatsApp/Telegram
args:
  lang:
    default: en
    description: "Language: en or de"
  channel:
    default: "${FINANCE_NEWS_CHANNEL:-whatsapp}"
    description: "Delivery channel: whatsapp or telegram"
  target:
    default: "${FINANCE_NEWS_TARGET}"
    description: "Target: group name, JID, or chat ID"
steps:
  # Check alerts against current prices

Observed stderr—

Workspace artifacts0

🧪 yaml parsestatus: passedpassedexit 0229 ms

tap for adaptive receipts

Commandeval . /source/workflows/briefing-cron.yaml

Observed stdout

# Finance Briefing Workflow for Cron (No Approval Gate)
# Usage: lobster run --file workflows/briefing-cron.yaml --args-json '{"time":"morning","lang":"de"}'
#
# This workflow:
# 1. Generates a market briefing via Docker
# 2. Translates portfolio headlines (German)
# 3. Sends directly to messaging channel (no approval)

name: finance.briefing.cron
description: Generate market briefing and send to WhatsApp/Telegram (auto-approve for cron)
args:
  time:
    default: morning
    description: "Briefing type: morning or evening"
  lang:
    default: de
    description: "Language: en or de"
  channel:
    default: "${FINANCE_NEWS_CHANNEL:-whatsapp}"
    description: "Delivery channel: whatsapp or telegram"

Observed stderr—

Workspace artifacts0

🧪 yaml parsestatus: passedpassedexit 0231 ms

tap for adaptive receipts

Commandeval . /source/workflows/briefing.yaml

Observed stdout

# Finance Briefing Workflow for Lobster
# Usage: lobster "workflows.run --file workflows/briefing.yaml --args-json '{\"time\":\"morning\",\"lang\":\"de\"}'"
#
# This workflow:
# 1. Generates a market briefing via Docker
# 2. Halts for approval before sending
# 3. Sends to messaging channel after approval

name: finance.briefing
description: Generate market briefing and send to WhatsApp/Telegram with approval gate
args:
  time:
    default: morning
    description: "Briefing type: morning or evening"
  lang:
    default: de
    description: "Language: en or de"
  channel:
    default: "${FINANCE_NEWS_CHANNEL:-whatsapp}"
    description: "Delivery channel: whatsapp or telegram"

Observed stderr—

Workspace artifacts0

🧪 yaml parsestatus: passedpassedexit 0224 ms

tap for adaptive receipts

Commandeval . /source/workflows/earnings-cron.yaml

Observed stdout

# Earnings Alert Workflow for Cron (No Approval Gate)
# Usage: lobster run --file workflows/earnings-cron.yaml --args-json '{"lang":"en"}'
#
# Schedule: 6:00 AM PT / 9:00 AM ET (30 min before market open)
# Sends today's earnings calendar to WhatsApp/Telegram

name: finance.earnings.cron
description: Send earnings alerts for today's reports
args:
  lang:
    default: en
    description: "Language: en or de"
  channel:
    default: "${FINANCE_NEWS_CHANNEL:-whatsapp}"
    description: "Delivery channel: whatsapp or telegram"
  target:
    default: "${FINANCE_NEWS_TARGET}"
    description: "Target: group name, JID, or chat ID"
steps:
  # Check earnings calendar for today and this week

Observed stderr—

Workspace artifacts0

🧪 yaml parsestatus: passedpassedexit 0228 ms

tap for adaptive receipts

Commandeval . /source/workflows/earnings-weekly-cron.yaml

Observed stdout

# Weekly Earnings Alert Workflow for Cron (No Approval Gate)
# Usage: lobster run --file workflows/earnings-weekly-cron.yaml --args-json '{"lang":"en"}'
#
# Schedule: Sunday 7:00 AM PT (before market week starts)
# Sends upcoming week's earnings calendar to WhatsApp/Telegram

name: finance.earnings.weekly.cron
description: Send weekly earnings preview for portfolio stocks
args:
  lang:
    default: en
    description: "Language: en or de"
  channel:
    default: "${FINANCE_NEWS_CHANNEL:-whatsapp}"
    description: "Delivery channel: whatsapp or telegram"
  target:
    default: "${FINANCE_NEWS_TARGET}"
    description: "Target: group name, JID, or chat ID"
steps:
  # Check earnings calendar for upcoming week

Observed stderr—

Workspace artifacts0

🧮 csv parsestatus: passedpassedexit 0320 ms

tap for adaptive receipts

Command

python3 -c import csv, pathlib, sys
files=sys.argv[1:]
for file in files:
    rows=list(csv.reader(pathlib.Path(file).open(encoding="utf-8", newline="")))
    if not rows:
        raise SystemExit(f"{file}: empty csv")
print(f"csv-parse-ok:{len(files)}") /source/tests/fixtures/sample_portfolio.csv

Observed stdout—

Observed stderr—

Workspace artifacts0

📚 pyproject parsestatus: passedpassedexit 0355 ms

tap for adaptive receipts

Command

python3 -c import pathlib, sys, tomllib; files=sys.argv[1:]; [tomllib.loads(pathlib.Path(file).read_text(encoding="utf-8")) for file in files]; print(f"pyproject-toml-parse-ok:{len(files)}") /source/pyproject.toml

Observed stdoutpyproject-toml-parse-ok:1

Observed stderr—

Workspace artifacts0

📋 requirements.txt shapestatus: failedexpectation_failedexit 0318 ms

tap for adaptive receipts

Command

python3 -c import pathlib, re, sys
allowed_prefixes=("-r ","--requirement ","-c ","--constraint ","-e ","--editable ","--index-url ","--extra-index-url ","--find-links ","--trusted-host ","--no-binary ","--only-binary ")
pattern=re.compile(r"^[A-Za-z0-9_.-]+(?:[[A-Za-z0-9_.,-]+])?(?:s*(?:==|>=|<=|~=|>|<|!=)s*[^s#;]+)?(?:s*;.*)?$")
files=sys.argv[1:]
for file in files:
    for idx,line in enumerate(pathlib.Path(file).read_text(encoding="utf-8").splitlines(), start=1):
        stripped=line.strip()
        if not stripped or stripped.startswith("#"):
            continue
        if stripped.startswith(allowed_prefixes) or "://" in stripped or " @ " in stripped:
            continue
        if not pattern.match(stripped):
            raise SystemExit(f"{file}:{idx}: malformed requirement line: {stripped}")
print(f"requirements-txt-shape-ok:{len(files)}") /source/requirements.txt

Observed stdout—

Observed stderr—

Workspace artifacts0

🐍 python help smokestatus: failedruntime_failedexit 11420 ms

tap for adaptive receipts

Command

sh -lc for file do python3 "$file" --help >/dev/null 2>&1 || python3 "$file" -h >/dev/null 2>&1 || exit 1; done && echo python-help-ok:$# functionality-python-help /source/scripts/alerts.py /source/scripts/briefing.py /source/scripts/earnings.py /source/scripts/fetch_news.py /source/scripts/portfolio.py /source/scripts/research.py

Observed stdout—

Observed stderr—

Workspace artifacts0

🔗 docs link integritystatus: passedpassedexit 0298 ms

tap for adaptive receipts

Command

python3 -c import pathlib, re, sys
root=pathlib.Path("/source").resolve()
pattern=re.compile(r"[[^]]+](([^)]+))")
missing=[]
checked=0
for file in [pathlib.Path(p) for p in sys.argv[1:]]:
    try:
        text=file.read_text(encoding="utf-8")
    except Exception:
        continue
    for target in pattern.findall(text):
        target=target.strip().strip("<>")
        if not target or target.startswith(("http://","https://","mailto:","#")):
            continue
        target=target.split("#",1)[0].strip()
        if not target:
            continue
        checked += 1
        resolved=(file.parent / target).resolve()
        try:
            resolved.relative_to(root)
        except ValueError:
            missing.append(f"{file}: outside-source link -> {target}")
            continue
        if not resolved.exists():
            missing.append(f"{file}: missing -> {target}")
if missing:
    raise SystemExit("\n".join(missing[:20]))
print(f"docs-local-links-ok:{checked}") /source/docs/EQUITY_SHEET_FIXES.md /source/docs/PREMIUM_SOURCES.md /source/README.md /source/SKILL.md /source/tests/README.md /source/workflows/README.md

Observed stdout—

Observed stderr—

Workspace artifacts0

Selection reasonuntested

Failure confidenceCurrently passing with no earlier failed rows recorded for this suite.

Source fingerprint1a429e80664b2aa796a44d05843e4528c30d5c02e1759a51808b540bde7d70d5

Worker hostoc-sandbox

Source cache hitno

Suite duration2487 ms

📦 Source mountstatus: passedpassedexit 0266 ms

tap for the raw receipts

Tested at2026-03-14 01:00 UTC

Command

sh -lc find /source -maxdepth 2 -type f | sort | sed -n "1,12p" > /workspace/source-files.txt && wc -l /workspace/source-files.txt && cat /workspace/source-files.txt

Classificationpassed

Image digestbusybox@sha256:b9598f8c98e24d0ad42c1742c32516772c3aa2151011ebaf639089bd18c605b8

Worker hostoc-sandbox

Harness version2026-03-13d

Suite versionbaseline-v3

Networknone

Fake env injectedno

Fake env leaknot detected

Read-only rootyes

No new privilegesyes

Capabilities droppedyes

Source files staged67

Workspace files produced1

stdout size343 B

stderr size0 B

stdout sha256a014c1b7613ac03f4c1ccfb86e3248b688433cfd49e7cdd4f66659c571d48fd1

stderr sha256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Observed stdout:

12 /workspace/source-files.txt
/source/README.md
/source/SKILL.md
/source/_meta.json
/source/config/config.json
/source/config/manual_earnings.json
/source/cron/alerts.sh
/source/cron/earnings-weekly.sh
/source/cron/earnings.sh
/source/cron/evening.sh
/source/cron/morning.sh
/source/docs/EQUITY_SHEET_FIXES.md
/source/docs/PREMIUM_SOURCES.md

Observed stderr:

(empty)

Workspace artifacts:

source-files.txt (312 B)

🔒 Source write guardstatus: passedpassedexit 0270 ms

tap for the raw receipts

Tested at2026-03-14 01:00 UTC

Command

sh -lc touch /source/driftbot-write-test >/tmp/source-write.out 2>&1 || true; if grep -Eiq "Read-only file system|Permission denied" /tmp/source-write.out || [ ! -e /source/driftbot-write-test ]; then echo source-readonly; fi

Classificationpassed

Image digestbusybox@sha256:b9598f8c98e24d0ad42c1742c32516772c3aa2151011ebaf639089bd18c605b8

Worker hostoc-sandbox

Harness version2026-03-13d

Suite versionbaseline-v3

Networknone

Fake env injectedno

Fake env leaknot detected

Read-only rootyes

No new privilegesyes

Capabilities droppedyes

Source files staged67

Workspace files produced0

stdout size16 B

stderr size0 B

stdout sha256a65af92097dc754e9cac4a455c5378d78b05e7927705ae45e1d20a24c4c1fd3c

stderr sha256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Observed stdout:

source-readonly

Observed stderr:

(empty)

Workspace artifacts:

No workspace artifacts produced.

📝 Workspace writestatus: passedpassedexit 0246 ms

tap for the raw receipts

Tested at2026-03-14 01:00 UTC

Command

sh -lc echo workspace-ok > /workspace/write-check.txt && grep -q "workspace-ok" /workspace/write-check.txt && echo workspace-write-ok

Classificationpassed

Image digestbusybox@sha256:b9598f8c98e24d0ad42c1742c32516772c3aa2151011ebaf639089bd18c605b8

Worker hostoc-sandbox

Harness version2026-03-13d

Suite versionbaseline-v3

Networknone

Fake env injectedno

Fake env leaknot detected

Read-only rootyes

No new privilegesyes

Capabilities droppedyes

Source files staged67

Workspace files produced1

stdout size19 B

stderr size0 B

stdout sha25681487f7df7b83c1d3fae9c36fb1009328fa34feca0f5c1581674de4cba29e6f5

stderr sha256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Observed stdout:

workspace-write-ok

Observed stderr:

(empty)

Workspace artifacts:

write-check.txt (13 B)

🌐 Hostname network denialstatus: passedpassedexit 0251 ms

tap for the raw receipts

Tested at2026-03-14 01:00 UTC

Command

sh -lc wget -T 3 -qO- http://example.com >/tmp/http-host.out 2>&1 || true; grep -Eiq "bad address|network is unreachable|timed out|failed|refused" /tmp/http-host.out && echo network-host-blocked

Classificationpassed

Image digestbusybox@sha256:b9598f8c98e24d0ad42c1742c32516772c3aa2151011ebaf639089bd18c605b8

Worker hostoc-sandbox

Harness version2026-03-13d

Suite versionbaseline-v3

Networknone

Fake env injectedno

Fake env leaknot detected

Read-only rootyes

No new privilegesyes

Capabilities droppedyes

Source files staged67

Workspace files produced0

stdout size21 B

stderr size0 B

stdout sha256aa4c95f392f2c19669ae67769237c23b54efb5f5e26a8ac8f11162ef28e7f141

stderr sha256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Observed stdout:

network-host-blocked

Observed stderr:

(empty)

Workspace artifacts:

No workspace artifacts produced.

🧱 Raw-IP network denialstatus: passedpassedexit 0237 ms

tap for the raw receipts

Tested at2026-03-14 01:00 UTC

Command

sh -lc wget -T 3 -qO- http://1.1.1.1 >/tmp/http-ip.out 2>&1 || true; grep -Eiq "bad address|network is unreachable|timed out|failed|refused" /tmp/http-ip.out && echo network-ip-blocked

Classificationpassed

Image digestbusybox@sha256:b9598f8c98e24d0ad42c1742c32516772c3aa2151011ebaf639089bd18c605b8

Worker hostoc-sandbox

Harness version2026-03-13d

Suite versionbaseline-v3

Networknone

Fake env injectedno

Fake env leaknot detected

Read-only rootyes

No new privilegesyes

Capabilities droppedyes

Source files staged67

Workspace files produced0

stdout size19 B

stderr size0 B

stdout sha256ee48345f6e97282a8b1f42753df3c9b37886403c60b09a044657b95126bae8b1

stderr sha256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Observed stdout:

network-ip-blocked

Observed stderr:

(empty)

Workspace artifacts:

No workspace artifacts produced.

🧪 Fake-env handlingstatus: passedpassedexit 0234 ms

tap for the raw receipts

Tested at2026-03-14 01:00 UTC

Commandsh -lc env | grep -E "OPENAI_API_KEY|SLACK_BOT_TOKEN|GITHUB_TOKEN" | sed "s/=.*$/=REDACTED/"

Classificationpassed

Image digestbusybox@sha256:b9598f8c98e24d0ad42c1742c32516772c3aa2151011ebaf639089bd18c605b8

Worker hostoc-sandbox

Harness version2026-03-13d

Suite versionbaseline-v3

Networknone

Fake env injectedyes

Fake env leaknot detected

Read-only rootyes

No new privilegesyes

Capabilities droppedyes

Source files staged67

Workspace files produced0

stdout size71 B

stderr size0 B

stdout sha256d714e2d3c2043f53d26d2deebac9b26a17f96f8d20158469b586bb598bc80c57

stderr sha256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Observed stdout:

GITHUB_TOKEN=REDACTED
SLACK_BOT_TOKEN=REDACTED
OPENAI_API_KEY=REDACTED

Observed stderr:

(empty)

Workspace artifacts:

No workspace artifacts produced.

🗝️ Secret-path isolationstatus: passedpassedexit 0230 ms

tap for the raw receipts

Tested at2026-03-14 01:00 UTC

Commandsh -lc test ! -e /root/.ssh && test ! -e /home/claw1/.ssh && test ! -e /workspace/.ssh && echo no-host-secrets

Classificationpassed

Image digestbusybox@sha256:b9598f8c98e24d0ad42c1742c32516772c3aa2151011ebaf639089bd18c605b8

Worker hostoc-sandbox

Harness version2026-03-13d

Suite versionbaseline-v3

Networknone

Fake env injectedno

Fake env leaknot detected

Read-only rootyes

No new privilegesyes

Capabilities droppedyes

Source files staged67

Workspace files produced0

stdout size16 B

stderr size0 B

stdout sha256e95cf953e01cafd431be70f0f5539c4c0ae8961ef5cff96d968a29509597c797

stderr sha256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Observed stdout:

no-host-secrets

Observed stderr:

(empty)

Workspace artifacts:

No workspace artifacts produced.

🐳 Docker socket denialstatus: passedpassedexit 0224 ms

tap for the raw receipts

Tested at2026-03-14 01:00 UTC

Commandsh -lc test ! -S /var/run/docker.sock && echo no-docker-socket

Classificationpassed

Image digestbusybox@sha256:b9598f8c98e24d0ad42c1742c32516772c3aa2151011ebaf639089bd18c605b8

Worker hostoc-sandbox

Harness version2026-03-13d

Suite versionbaseline-v3

Networknone

Fake env injectedno

Fake env leaknot detected

Read-only rootyes

No new privilegesyes

Capabilities droppedyes

Source files staged67

Workspace files produced0

stdout size17 B

stderr size0 B

stdout sha256702d41c3742c72aff24f584ad0138f2df38b424090d03d3b3e85e3212f0df2ef

stderr sha256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Observed stdout:

no-docker-socket

Observed stderr:

(empty)

Workspace artifacts:

No workspace artifacts produced.

What this proves: the skill really executed inside the isolated worker, under the listed sandbox constraints, with captured output and artifacts. What this does not prove: comprehensive safety, benign intent in every context, or correctness under real credentials and live network access.

Publisher and provenance

Listed in the VoltAgent awesome-openclaw-skills catalog under Communication and lightly source-scanned from openclaw/skills. This is stronger evidence than catalog metadata alone, but still not a full runtime audit.

Source type: awesome-index

Source path: https://github.com/openclaw/skills/tree/main/skills/kesslerio/finance-news/SKILL.md

Source URL: https://github.com/openclaw/skills/tree/main/skills/kesslerio/finance-news/SKILL.md

Discovery category: Communication

Manual review

No human review yet. The scorecard is currently static-analysis-first.

Community signals

These are community attention markers, not crowd-sourced truth. Click what feels especially worth flagging or reviewing.

Related skills

kefir-batch-manager

p-salmon · Trusted

overall

Comprehensive kéfir batch management system with cycle tracking, intelligent reminders, grain health monitoring, and recipe management. Use when managing kéfir fermentation cycles, tracking grain health, calculating ratios, scheduling reminders, or maintaining fermentation records.

echo-agent

krishna3554 · Trusted

overall

EchoAgent is a minimal OpenClaw-compatible skill.

japanese-tutor

chndranndr · Trusted

overall

Interactive Japanese learning assistant. Supports vocabulary, grammar, quizzes, roleplay, PDF/DOCX material parsing for study/homework help, and OCR translation.