olo-sec-scanner

SEC EDGAR filing analysis for M&A due diligence — extract financials, detect risks, and track corporate events from 10-K, 10-Q, and 8-K filings

3,891 stars

Best use case

olo-sec-scanner is best used when you need a repeatable AI agent workflow instead of a one-off prompt.

SEC EDGAR filing analysis for M&A due diligence — extract financials, detect risks, and track corporate events from 10-K, 10-Q, and 8-K filings

Teams using olo-sec-scanner should expect a more consistent output, faster repeated execution, less prompt rewriting.

When to use this skill

  • You want a reusable workflow that can be run more than once with consistent structure.

When not to use this skill

  • You only need a quick one-off answer and do not need a reusable workflow.
  • You cannot install or maintain the underlying files, dependencies, or repository context.

Installation

Claude Code / Cursor / Codex

$curl -o ~/.claude/skills/olo-sec-scanner/SKILL.md --create-dirs "https://raw.githubusercontent.com/openclaw/skills/main/skills/aniebyl/olo-sec-scanner/SKILL.md"

Manual Installation

  1. Download SKILL.md from GitHub
  2. Place it in .claude/skills/olo-sec-scanner/SKILL.md inside your project
  3. Restart your AI agent — it will auto-discover the skill

How olo-sec-scanner Compares

Feature / Agentolo-sec-scannerStandard Approach
Platform SupportNot specifiedLimited / Varies
Context Awareness High Baseline
Installation ComplexityUnknownN/A

Frequently Asked Questions

What does this skill do?

SEC EDGAR filing analysis for M&A due diligence — extract financials, detect risks, and track corporate events from 10-K, 10-Q, and 8-K filings

Where can I find the source code?

You can find the source code on GitHub using the link provided at the top of the page.

Related Guides

SKILL.md Source

# SEC Filing Scanner for M&A

Extract and analyze SEC EDGAR filings for acquisition due diligence.

## Data Source

SEC EDGAR API (free, no API key, 10 req/sec rate limit):
- Company Facts: `https://data.sec.gov/api/xbrl/companyfacts/CIK{cik}.json`
- Submissions: `https://data.sec.gov/submissions/CIK{cik}.json`
- Full-Text Search: `https://efts.sec.gov/LATEST/search-index?q=...`

## Filing Types & M&A Relevance

| Filing | Use Case |
|--------|----------|
| 10-K | Annual financials, risk factors, segment data, legal proceedings |
| 10-Q | Quarterly trends, interim changes, going concern flags |
| 8-K | Material events: acquisitions, dispositions, leadership changes, restatements |
| DEF 14A | Executive comp, related-party transactions, governance |
| SC 13D/G | Activist positions, ownership changes above 5% |
| Form 4 | Insider buying/selling patterns (signal conviction) |
| Form D | Private placement activity (pre-IPO targets) |

## Extraction Framework

### 1. Financial Extraction (from XBRL)
- Revenue (3-5 year trend from `Revenues` or `RevenueFromContractWithCustomerExcludingAssessedTax`)
- EBITDA (computed: `OperatingIncome` + `DepreciationAndAmortization`)
- Net income, EPS, diluted shares
- Total assets, total liabilities, stockholders' equity
- Operating cash flow, CapEx, free cash flow
- Segment revenue breakdown (if multi-segment)

### 2. Risk Factor Analysis (from 10-K Item 1A)
- Categorize risks: market, operational, regulatory, financial, legal, technology
- Flag risks mentioning: litigation, regulatory investigation, material weakness, going concern
- Compare risk factors year-over-year to detect new disclosures
- Score overall risk severity (low / moderate / elevated / high)

### 3. Material Event Detection (from 8-K)
- Item 1.01: Entry into material agreement
- Item 2.01: Completion of acquisition or disposition
- Item 2.05: Costs of restructuring
- Item 4.01: Change in accountant (red flag)
- Item 5.02: Departure of directors/officers
- Item 8.01: Other material events

### 4. Ownership & Governance (from DEF 14A, 13D/G)
- Top institutional holders and concentration
- Insider ownership percentage
- Recent insider transactions (net buying vs. selling)
- Activist involvement flags

## Output Format

```
SEC Filing Analysis: [Company Name] (CIK: XXXXXXXXXX)

Filings Scanned: 12 (3x 10-K, 8x 10-Q, 1x 8-K)
Date Range: 2023-01-01 to 2025-12-31

Financial Summary (from XBRL):
  Revenue TTM:     $164.5M (↑ 12% YoY)
  EBITDA TTM:      $28.3M  (17.2% margin)
  FCF TTM:         $22.1M
  Net Debt:        $45.0M  (1.6x EBITDA)

Risk Flags:
  ⚠ New risk factor: "concentration of revenue" (added FY2025)
  ⚠ Material weakness in internal controls (10-K Item 9A)
  ✓ No going concern language
  ✓ No change in auditor

Material Events (8-K):
  2025-09-15: Entered into $50M credit facility (Item 1.01)
  2025-06-01: CFO departure (Item 5.02)

Insider Activity (Last 12 months):
  Net Selling: $2.3M (3 insiders sold, 0 bought)
```

## M&A-Specific Checks

- **Change of control provisions**: Search 10-K for "change of control", "golden parachute", "poison pill"
- **Material contracts**: Identify contracts with change-of-control triggers
- **Customer concentration**: Extract from risk factors or segment data
- **Pending litigation**: Quantify contingent liabilities from footnotes
- **NOL carryforwards**: Extract tax asset values (Section 382 limitation risk in acquisition)
- **Lease obligations**: Right-of-use assets and total lease commitments

Related Skills

Contract Reviewer - AI Legal Document Risk Scanner

3891
from openclaw/skills

Upload any contract or legal document and get a structured risk analysis with flagged clauses, plain-language explanations, and negotiation suggestions.

AURA Security Scanner

3891
from openclaw/skills

Scan AI agent skills for malware, credential theft, prompt injection, and dangerous permissions before installing them

lora-cad-scanner

3891
from openclaw/skills

LoRa Channel Activity Detection (CAD) scanner for LilyGo T3 v1.6 (ESP32-PICO-D4 + SX1276) with HackRF One support. Scans a configurable frequency range using multiple BW/SF combinations, displays live progress on the SSD1306 OLED, stores detected channels in device RAM, emits structured 15-minute reports over Serial, and sends Telegram notifications for new detections via an OpenClaw cron pipeline. Use when scanning for LoRa devices in a frequency band, setting up a LilyGo T3 as a LoRa scanner/sniffer, building RF monitoring pipelines with Telegram alerting, or doing RF reconnaissance with HackRF + LilyGo together.

securevibes-scanner

3891
from openclaw/skills

Run AI-powered application security scans on codebases. Use when asked to scan code for security vulnerabilities, generate threat models, review code for security issues, run incremental security scans, or set up continuous security monitoring via cron. Supports full scans (one-shot) and incremental scans (cron-driven, only new commits).

aws-secrets-scanner

3891
from openclaw/skills

Detect hardcoded secrets, exposed API keys, and credential misconfigurations in IaC and config files

security-scanner

3891
from openclaw/skills

Scans OpenClaw skills for security vulnerabilities and suspicious patterns before installation

permission-creep-scanner

3891
from openclaw/skills

Helps detect permission creep in AI agent skills — flags when a skill's actual code accesses resources far beyond what its declared purpose requires, like a "fix typo" skill reading your .env file.

clawhub-skill-scanner

3891
from openclaw/skills

Security gatekeeper for skill installations. MANDATORY before installing any skill from ClawHub, GitHub, or external sources. Performs deep code analysis to detect malicious patterns, credential access, data exfiltration, command injection, and other security risks. Triggers: "install skill", "clawhub install", "new skill", "add skill", "skill from". Always run this BEFORE installation.

ggshield-scanner

3891
from openclaw/skills

Detect 500+ types of hardcoded secrets (API keys, credentials, tokens) before they leak into git. Wraps GitGuardian's ggshield CLI.

contract-scanner

3891
from openclaw/skills

Scan smart contracts for security risks. Detect honeypots, high taxes, and malicious code. Protect yourself from scams!

edgeone skill scanner

3891
from openclaw/skills

Scan any agent skill for security risks before you install or use it. Powered by Tencent Zhuque Lab A.I.G (AI-Infra-Guard). 100% local static analysis — no file contents or credentials leave your device. Compatible with CodeBuddy, Cursor, Windsurf, Claude Code, OpenClaw and more. Triggers on: `这个 skill 安全吗`, `skill 安全扫描`, `检查 skill 安全`, `audit skill`, `scan skill`, `check skill safety`, `analyze skill`, `inspect skill`, `verify skill`, `skill security`, `skill supply chain`. Do NOT trigger for general agent usage, full system health checks, project debugging, or normal development.

skill-scanner

3891
from openclaw/skills

Scan any agent skill for security risks before you install or use it. Powered by Tencent Zhuque Lab A.I.G (AI-Infra-Guard). 100% local static analysis — no file contents or credentials leave your device. Compatible with CodeBuddy, Cursor, Windsurf, Claude Code, OpenClaw and more. Triggers on: `这个 skill 安全吗`, `skill 安全扫描`, `检查 skill 安全`, `audit skill`, `scan skill`, `check skill safety`, `analyze skill`, `inspect skill`, `verify skill`, `skill security`, `skill supply chain`. Do NOT trigger for general agent usage, full system health checks, project debugging, or normal development.