Portfolio Risk Desk

Generate a portfolio-aware daily or on-demand risk analysis brief from public market data, company updates, earnings material, and macro context, then emit a...

This skill appears to implement the portfolio briefing it advertises, but there are two things to check before installing: (1) Resolve the metadata mismatch — the registry claims no required env vars while SKILL.md and the README require APIFY_API_TOKEN (and optionally CIVIC_CLIENT_ID/NOTION_PARENT_PAGE_ID). If you do not want the skill to use your Apify account, do not supply APIFY_API_TOKEN or set ENABLE_LIVE_PROVIDERS=false. (2) Audit the retrieval/bootstrap code (apify_bootstrap.py and retrieval adapters) to confirm exactly what network calls and task creation the skill will perform with APIFY_API_TOKEN. Treat APIFY_API_TOKEN as a high-privilege secret (it can create/run tasks and access scraped data). If you rely on host-managed Notion or Redis, confirm the host implements those handoffs and that the skill will not perform direct writes. If unsure, run the package in a local sandbox with live providers disabled and review the output and tests first.

Type: OpenClaw Skill Name: portfolio-risk-desk Version: 1.0.2 The Portfolio Risk Desk skill is a well-structured financial analysis tool designed to generate market briefs. It uses Apify for web and social media retrieval and prepares structured handoff payloads for Notion. Security analysis of the Python source code and SKILL.md instructions reveals no malicious behavior, data exfiltration, or unauthorized persistence. The tool utilizes a secure 'handoff' architecture where the host environment (OpenClaw) manages sensitive API interactions and memory, minimizing the skill's direct attack surface. All network activity is directed to the legitimate Apify API (api.apify.com) as defined in apify_bootstrap.py and retrieval.py.