Catalogskills.sh · rkiding

alphaear-reporter

Plan, write, and edit professional financial reports; generate finance chart configurations. Use when condensing finance analysis into a structured output.

Review advisedVerified hub536 installs

Savant verdict: Review advised

Security analysis or source-hub review identified patterns requiring attention.

Live evaluation

Not evaluated yet. Workspaces can request a live evaluation.

Security assessment

Risk score
23/100
Recommendation
CAUTION
Severity
MEDIUM
Savant decision
Review advised
The assessment recommends caution with a risk score of 20/100 or more; review its findings before use. Static security analysis completed.

3 patterns found

  • MCP Least Privilege: Skill declares no tool scope ('permissions' or 'allowed-tools') but code capabilities were detected: env, file_read, file_write, network.medium · SKILL.md:1 · Without declared permissions the skill's intent is opaque and cannot be validated.
  • Data Exfiltration: https://api.z.ai/medium · scripts/utils/llm/factory.py:75 · Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
  • Dangerous Code Execution: torch.load(path, map_location=self.device)medium · scripts/utils/predictor/evaluation.py:39 · Untrusted data is passed to an insecure deserializer (pickle, marshal, dill, jsonpickle, joblib, yaml.load without a safe Loader, or torch.load without weights_only). These deserializers reconstruct arbitrary objects and invoke callables during loading, so deserializing attacker-controlled bytes is equivalent to arbitrary code execution.

Structure

  • Ships 34 executable scriptsscripts/__init__.py, scripts/prompts/fin_agent.py, scripts/prompts/forecast_analyst.py, scripts/prompts/intent_agent.py, scripts/prompts/isq_prompt_generator.py, …. Review what they do before enabling the skill for agents with tool access.
  • No license declaredConfirm you may reuse this skill before importing it into your repository.
  • The source hub's security checks flagged this skillSnyk: warn (Risk: MEDIUM · 1 issue); Runlayer: fail (10/35 files flagged)

SKILL.md

---
name: alphaear-reporter
description: Plan, write, and edit professional financial reports; generate finance chart configurations. Use when condensing finance analysis into a structured output.
---

# AlphaEar Reporter Skill

## Overview

This skill provides a structured workflow for generating professional financial reports. It includes planning, writing, editing, and creating visual aids (charts).

## Capabilities

## Capabilities

### 1. Generate Structured Reports (Agentic Workflow)

**YOU (the Agent)** are the Report Generator. Use the prompts in `references/PROMPTS.md` to progressively build the report.

**Workflow:**
1.  **Cluster Signals**: Read input signals and use the **Cluster Signals Prompt** to group them.
2.  **Write Sections**: For each cluster, use the **Write Section Prompt** to generate analysis.
3.  **Assemble**: Use the **Final Assembly Prompt** to compile the report.

### 2. Visualization Tools

Use `scripts/visualizer.py` to generate chart configurations if needed manually, though the Writer Prompt usually handles this via `json-chart` blocks.

## Dependencies

-   `sqlite3` (built-in)