olo-sec-scanner
SEC EDGAR filing analysis for M&A due diligence — extract financials, detect risks, and track corporate events from 10-K, 10-Q, and 8-K filings
Best use case
olo-sec-scanner is best used when you need a repeatable AI agent workflow instead of a one-off prompt.
SEC EDGAR filing analysis for M&A due diligence — extract financials, detect risks, and track corporate events from 10-K, 10-Q, and 8-K filings
Teams using olo-sec-scanner should expect a more consistent output, faster repeated execution, less prompt rewriting.
When to use this skill
- You want a reusable workflow that can be run more than once with consistent structure.
When not to use this skill
- You only need a quick one-off answer and do not need a reusable workflow.
- You cannot install or maintain the underlying files, dependencies, or repository context.
Installation
Claude Code / Cursor / Codex
Manual Installation
- Download SKILL.md from GitHub
- Place it in
.claude/skills/olo-sec-scanner/SKILL.mdinside your project - Restart your AI agent — it will auto-discover the skill
How olo-sec-scanner Compares
| Feature / Agent | olo-sec-scanner | Standard Approach |
|---|---|---|
| Platform Support | Not specified | Limited / Varies |
| Context Awareness | High | Baseline |
| Installation Complexity | Unknown | N/A |
Frequently Asked Questions
What does this skill do?
SEC EDGAR filing analysis for M&A due diligence — extract financials, detect risks, and track corporate events from 10-K, 10-Q, and 8-K filings
Where can I find the source code?
You can find the source code on GitHub using the link provided at the top of the page.
Related Guides
AI Agents for Coding
Browse AI agent skills for coding, debugging, testing, refactoring, code review, and developer workflows across Claude, Cursor, and Codex.
Best AI Skills for ChatGPT
Find the best AI skills to adapt into ChatGPT workflows for research, writing, summarization, planning, and repeatable assistant tasks.
AI Agent for Product Research
Browse AI agent skills for product research, competitive analysis, customer discovery, and structured product decision support.
SKILL.md Source
# SEC Filing Scanner for M&A
Extract and analyze SEC EDGAR filings for acquisition due diligence.
## Data Source
SEC EDGAR API (free, no API key, 10 req/sec rate limit):
- Company Facts: `https://data.sec.gov/api/xbrl/companyfacts/CIK{cik}.json`
- Submissions: `https://data.sec.gov/submissions/CIK{cik}.json`
- Full-Text Search: `https://efts.sec.gov/LATEST/search-index?q=...`
## Filing Types & M&A Relevance
| Filing | Use Case |
|--------|----------|
| 10-K | Annual financials, risk factors, segment data, legal proceedings |
| 10-Q | Quarterly trends, interim changes, going concern flags |
| 8-K | Material events: acquisitions, dispositions, leadership changes, restatements |
| DEF 14A | Executive comp, related-party transactions, governance |
| SC 13D/G | Activist positions, ownership changes above 5% |
| Form 4 | Insider buying/selling patterns (signal conviction) |
| Form D | Private placement activity (pre-IPO targets) |
## Extraction Framework
### 1. Financial Extraction (from XBRL)
- Revenue (3-5 year trend from `Revenues` or `RevenueFromContractWithCustomerExcludingAssessedTax`)
- EBITDA (computed: `OperatingIncome` + `DepreciationAndAmortization`)
- Net income, EPS, diluted shares
- Total assets, total liabilities, stockholders' equity
- Operating cash flow, CapEx, free cash flow
- Segment revenue breakdown (if multi-segment)
### 2. Risk Factor Analysis (from 10-K Item 1A)
- Categorize risks: market, operational, regulatory, financial, legal, technology
- Flag risks mentioning: litigation, regulatory investigation, material weakness, going concern
- Compare risk factors year-over-year to detect new disclosures
- Score overall risk severity (low / moderate / elevated / high)
### 3. Material Event Detection (from 8-K)
- Item 1.01: Entry into material agreement
- Item 2.01: Completion of acquisition or disposition
- Item 2.05: Costs of restructuring
- Item 4.01: Change in accountant (red flag)
- Item 5.02: Departure of directors/officers
- Item 8.01: Other material events
### 4. Ownership & Governance (from DEF 14A, 13D/G)
- Top institutional holders and concentration
- Insider ownership percentage
- Recent insider transactions (net buying vs. selling)
- Activist involvement flags
## Output Format
```
SEC Filing Analysis: [Company Name] (CIK: XXXXXXXXXX)
Filings Scanned: 12 (3x 10-K, 8x 10-Q, 1x 8-K)
Date Range: 2023-01-01 to 2025-12-31
Financial Summary (from XBRL):
Revenue TTM: $164.5M (↑ 12% YoY)
EBITDA TTM: $28.3M (17.2% margin)
FCF TTM: $22.1M
Net Debt: $45.0M (1.6x EBITDA)
Risk Flags:
⚠ New risk factor: "concentration of revenue" (added FY2025)
⚠ Material weakness in internal controls (10-K Item 9A)
✓ No going concern language
✓ No change in auditor
Material Events (8-K):
2025-09-15: Entered into $50M credit facility (Item 1.01)
2025-06-01: CFO departure (Item 5.02)
Insider Activity (Last 12 months):
Net Selling: $2.3M (3 insiders sold, 0 bought)
```
## M&A-Specific Checks
- **Change of control provisions**: Search 10-K for "change of control", "golden parachute", "poison pill"
- **Material contracts**: Identify contracts with change-of-control triggers
- **Customer concentration**: Extract from risk factors or segment data
- **Pending litigation**: Quantify contingent liabilities from footnotes
- **NOL carryforwards**: Extract tax asset values (Section 382 limitation risk in acquisition)
- **Lease obligations**: Right-of-use assets and total lease commitmentsRelated Skills
Contract Reviewer - AI Legal Document Risk Scanner
Upload any contract or legal document and get a structured risk analysis with flagged clauses, plain-language explanations, and negotiation suggestions.
AURA Security Scanner
Scan AI agent skills for malware, credential theft, prompt injection, and dangerous permissions before installing them
lora-cad-scanner
LoRa Channel Activity Detection (CAD) scanner for LilyGo T3 v1.6 (ESP32-PICO-D4 + SX1276) with HackRF One support. Scans a configurable frequency range using multiple BW/SF combinations, displays live progress on the SSD1306 OLED, stores detected channels in device RAM, emits structured 15-minute reports over Serial, and sends Telegram notifications for new detections via an OpenClaw cron pipeline. Use when scanning for LoRa devices in a frequency band, setting up a LilyGo T3 as a LoRa scanner/sniffer, building RF monitoring pipelines with Telegram alerting, or doing RF reconnaissance with HackRF + LilyGo together.
securevibes-scanner
Run AI-powered application security scans on codebases. Use when asked to scan code for security vulnerabilities, generate threat models, review code for security issues, run incremental security scans, or set up continuous security monitoring via cron. Supports full scans (one-shot) and incremental scans (cron-driven, only new commits).
aws-secrets-scanner
Detect hardcoded secrets, exposed API keys, and credential misconfigurations in IaC and config files
security-scanner
Scans OpenClaw skills for security vulnerabilities and suspicious patterns before installation
permission-creep-scanner
Helps detect permission creep in AI agent skills — flags when a skill's actual code accesses resources far beyond what its declared purpose requires, like a "fix typo" skill reading your .env file.
clawhub-skill-scanner
Security gatekeeper for skill installations. MANDATORY before installing any skill from ClawHub, GitHub, or external sources. Performs deep code analysis to detect malicious patterns, credential access, data exfiltration, command injection, and other security risks. Triggers: "install skill", "clawhub install", "new skill", "add skill", "skill from". Always run this BEFORE installation.
ggshield-scanner
Detect 500+ types of hardcoded secrets (API keys, credentials, tokens) before they leak into git. Wraps GitGuardian's ggshield CLI.
contract-scanner
Scan smart contracts for security risks. Detect honeypots, high taxes, and malicious code. Protect yourself from scams!
edgeone skill scanner
Scan any agent skill for security risks before you install or use it. Powered by Tencent Zhuque Lab A.I.G (AI-Infra-Guard). 100% local static analysis — no file contents or credentials leave your device. Compatible with CodeBuddy, Cursor, Windsurf, Claude Code, OpenClaw and more. Triggers on: `这个 skill 安全吗`, `skill 安全扫描`, `检查 skill 安全`, `audit skill`, `scan skill`, `check skill safety`, `analyze skill`, `inspect skill`, `verify skill`, `skill security`, `skill supply chain`. Do NOT trigger for general agent usage, full system health checks, project debugging, or normal development.
skill-scanner
Scan any agent skill for security risks before you install or use it. Powered by Tencent Zhuque Lab A.I.G (AI-Infra-Guard). 100% local static analysis — no file contents or credentials leave your device. Compatible with CodeBuddy, Cursor, Windsurf, Claude Code, OpenClaw and more. Triggers on: `这个 skill 安全吗`, `skill 安全扫描`, `检查 skill 安全`, `audit skill`, `scan skill`, `check skill safety`, `analyze skill`, `inspect skill`, `verify skill`, `skill security`, `skill supply chain`. Do NOT trigger for general agent usage, full system health checks, project debugging, or normal development.