finance-news

Fail

Audited by Runlayer on Feb 27, 2026

Risk Level: HIGH
Scan Summary
Max Score
96%
Files
44
Flagged
20
Chunks
56
Flagged Files (20)
finance-news/workflows/briefing-cron.yamlHIGH
96.1%

Malicious tool definition detected

finance-news/cron/alerts.shHIGH
95.7%

Malicious tool definition detected

set -e export SKILL_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)" export FINANCE_NEWS_TARGET="${FINANCE_NEWS_TARGET:-120363421796203667@g.us}" export FINANCE_NEWS_CHANNEL="${FINANCE_NEWS_CHANNEL:-whatsapp}" echo "[$(date)] Checking price alerts via Lobster..." lobster run --file "$SKILL_DIR/workflows/alerts-cron.yaml" \ --args-json '{"lang":"en"}' echo "[$(date)] Price alerts check complete."

finance-news/workflows/briefing.yamlHIGH
95.0%

Malicious tool definition detected

Sends to messaging channel after approval name: finance.briefing description: Generate market briefing and send to WhatsApp/Telegram with approval gate args: time: default: morning description: "Briefing type: morning or evening" lang: default: de description: "Language: en or de" channel: default: "${FINANCE_NEWS_CHANNEL:-whatsapp}" description: "Delivery channel: whatsapp or telegram" target: default: "${FINANCE_NEWS_TARGET}" description: "Target: group name, JID, phone number, or Telegram cha

finance-news/cron/evening.shHIGH
94.8%

Malicious tool definition detected

set -e export SKILL_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)" export FINANCE_NEWS_TARGET="${FINANCE_NEWS_TARGET:-120363421796203667@g.us}" export FINANCE_NEWS_CHANNEL="${FINANCE_NEWS_CHANNEL:-whatsapp}" echo "[$(date)] Starting evening briefing via Lobster..." lobster run --file "$SKILL_DIR/workflows/briefing-cron.yaml" \ --args-json '{"time":"evening","lang":"de"}' echo "[$(date)] Evening briefing complete."

finance-news/scripts/earnings.pyHIGH
94.3%

Malicious tool definition detected

finance-news/cron/earnings.shHIGH
93.7%

Malicious tool definition detected

set -e export SKILL_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)" export FINANCE_NEWS_TARGET="${FINANCE_NEWS_TARGET:-120363421796203667@g.us}" export FINANCE_NEWS_CHANNEL="${FINANCE_NEWS_CHANNEL:-whatsapp}" echo "[$(date)] Checking today's earnings via Lobster..." lobster run --file "$SKILL_DIR/workflows/earnings-cron.yaml" \ --args-json '{"lang":"en"}' echo "[$(date)] Earnings alert complete."

finance-news/cron/morning.shHIGH
93.2%

Malicious tool definition detected

set -e export SKILL_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)" export FINANCE_NEWS_TARGET="${FINANCE_NEWS_TARGET:-120363421796203667@g.us}" export FINANCE_NEWS_CHANNEL="${FINANCE_NEWS_CHANNEL:-whatsapp}" echo "[$(date)] Starting morning briefing via Lobster..." lobster run --file "$SKILL_DIR/workflows/briefing-cron.yaml" \ --args-json '{"time":"morning","lang":"de"}' echo "[$(date)] Morning briefing complete."

finance-news/workflows/earnings-cron.yamlHIGH
93.1%

Malicious tool definition detected

command: | SKILL_DIR="${SKILL_DIR:-$HOME/projects/skills/personal/finance-news}" python3 "$SKILL_DIR/scripts/earnings.py" check --lang "${lang}" description: Get today's earnings calendar # Send earnings alert if there's content - id: send_earnings command: | MSG=$(cat) MSG=$(echo "$MSG" | tr -d '\r') # Only send if there are actual earnings today if echo "$MSG" | grep -q "EARNINGS TODAY\|EARNINGS HEUTE"; then openclaw message send \ --channel "${channel}" \ --target "${target}" \ --message "$MS

finance-news/scripts/summarize.pyHIGH
92.5%

Tool passed security scan

Malicious tool definition detected

finance-news/workflows/alerts-cron.yamlHIGH
92.1%

Malicious tool definition detected

finance-news/cron/earnings-weekly.shHIGH
91.9%

Malicious tool definition detected

set -e export SKILL_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)" export FINANCE_NEWS_TARGET="${FINANCE_NEWS_TARGET:-120363421796203667@g.us}" export FINANCE_NEWS_CHANNEL="${FINANCE_NEWS_CHANNEL:-whatsapp}" echo "[$(date)] Checking next week's earnings via Lobster..." lobster run --file "$SKILL_DIR/workflows/earnings-weekly-cron.yaml" \ --args-json '{"lang":"en"}' echo "[$(date)] Weekly earnings alert complete."

finance-news/workflows/earnings-weekly-cron.yamlHIGH
90.4%

Malicious tool definition detected

command: | SKILL_DIR="${SKILL_DIR:-$HOME/projects/skills/personal/finance-news}" python3 "$SKILL_DIR/scripts/earnings.py" check --week --lang "${lang}" description: Get upcoming week's earnings calendar # Send earnings alert if there's content - id: send_earnings command: | MSG=$(cat) MSG=$(echo "$MSG" | tr -d '\r') # Only send if there are actual earnings next week if echo "$MSG" | grep -qE "EARNINGS (NEXT WEEK|NÄCHSTE WOCHE)"; then openclaw message send \ --channel "${channel}" \ --target "${t

finance-news/README.mdMEDIUM
87.0%

Malicious tool definition detected

# Generate a briefing docker run --rm -v "$PWD/config:/app/config:ro" \ finance-news-briefing python3 scripts/briefing.py \ --time morning --lang de --json --fast ``` ### Lobster Workflow ```bash # Set required environment variables export FINANCE_NEWS_TARGET="your-group-jid@g.us" # WhatsApp JID or Telegram chat ID export FINANCE_NEWS_CHANNEL="whatsapp" # or "telegram" # Run workflow (halts for approval before sending) lobster run workflows/briefing.yaml --args-json '{"time":"morning

finance-news/scripts/venv-setup.shMEDIUM
85.6%

Malicious tool definition detected

grep -q "FINANCE_NEWS_LD_LIBRARY_PATH" "$ACTIVATE_SCRIPT"; then cat >> "$ACTIVATE_SCRIPT" << EOF # NixOS libstdc++ fix for numpy/yfinance (added by venv-setup.sh) if [[ -z "\${FINANCE_NEWS_LD_LIBRARY_PATH:-}" ]]; then export FINANCE_NEWS_LD_LIBRARY_PATH=1 if [[ -z "\${LD_LIBRARY_PATH:-}" ]]; then export LD_LIBRARY_PATH="$LIBSTDCXX_PATH" else export LD_LIBRARY_PATH="$LIBSTDCXX_PATH:\$LD_LIBRARY_PATH" fi fi EOF echo " Added LD_LIBRARY_PATH=$LIBSTDCXX_PATH to activate script" fi else echo " ⚠️

finance-news/scripts/fetch_news.pyMEDIUM
77.1%

Tool passed security scan

Malicious tool definition detected

finance-news/scripts/alerts.pyLOW
69.8%

Tool passed security scan

finance-news/workflows/README.mdLOW
63.8%

Tool passed security scan

finance-news/docs/PREMIUM_SOURCES.mdLOW
55.1%

Tool passed security scan

finance-news/docs/EQUITY_SHEET_FIXES.mdLOW
53.1%

Tool passed security scan

finance-news/tests/test_ranking.pyLOW
50.8%

Tool passed security scan

Passed Files (24)Click to expand
finance-news/scripts/ranking.pyOK
48.5%

Tool passed security scan

finance-news/scripts/stocks.pyOK
43.4%

Tool passed security scan

finance-news/SKILL.mdOK
41.5%

Tool passed security scan

finance-news/scripts/translate_portfolio.pyOK
37.1%

Tool passed security scan

finance-news/pytest.iniOK
36.5%

Tool passed security scan

finance-news/tests/test_earnings.pyOK
35.3%

Tool passed security scan

finance-news/scripts/briefing.pyOK
31.7%

Tool passed security scan

finance-news/scripts/research.pyOK
28.6%

Tool passed security scan

finance-news/scripts/portfolio.pyOK
20.0%

Tool passed security scan

finance-news/tests/README.mdOK
16.2%

Tool passed security scan

finance-news/tests/test_fetch_news.pyOK
15.3%

Tool passed security scan

finance-news/requirements-test.txtOK
15.3%

Tool passed security scan

finance-news/config/config.jsonOK
12.7%

Tool passed security scan

finance-news/scripts/utils.pyOK
12.2%

Tool passed security scan

finance-news/tests/test_alerts.pyOK
11.8%

Tool passed security scan

finance-news/tests/fixtures/sample_portfolio.csvOK
10.2%

Tool passed security scan

finance-news/scripts/setup.pyOK
9.5%

Tool passed security scan

finance-news/tests/fixtures/sample_rss.xmlOK
9.2%

Tool passed security scan

finance-news/tests/test_briefing.pyOK
7.5%

Tool passed security scan

finance-news/tests/test_summarize.pyOK
7.4%

Tool passed security scan

finance-news/requirements.txtOK
7.2%

Tool passed security scan

finance-news/tests/test_setup.pyOK
6.0%

Tool passed security scan

finance-news/tests/test_portfolio.pyOK
5.6%

Tool passed security scan

finance-news/config/manual_earnings.jsonOK
5.2%

Tool passed security scan

Audit Metadata
Max File Score
96%
Classification
UNKNOWN_SERVER
Files Scanned
44
Files Flagged
20
Chunks Analyzed
56
Analyzed
Feb 27, 2026, 01:16 PM
Security Audit — runlayer — finance-news