Waxell

plugin

financial-analysis Review findings

Anthropicanthropics/financial-servicesupdated

Core financial modeling and analysis tools: DCF, comps, LBO, 3-statement models, competitive analysis, and deck QC
Anthropic's own description, from the plugin's files.
Stars
41,017
Version
v1
Copies
0

Overview

Security

Security scan

Checked 2 days ago

Result

Review findings Waxell's checks found 13 findings to review, highest severity high.

Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work

Findings (13)

high · 1

  • high

    Tells Claude to install unpinned packages (openpyxl)

    skills/dcf-model/scripts/validate_dcf.py:20 · skill_risk:S2

medium · 5

  • medium

    moodys: connects to an unrecognised server (api.moodys.com)

    .mcp.json · mcp_risk:M9

  • medium

    mtnewswire: connects to an unrecognised server (vast-mcp.blueskyapi.com)

    .mcp.json · mcp_risk:M9

  • medium

    aiera: connects to an unrecognised server (mcp-pub.aiera.com)

    .mcp.json · mcp_risk:M9

  • medium

    chronograph: connects to an unrecognised server (ai.chronograph.pe)

    .mcp.json · mcp_risk:M9

  • medium

    box: connects to an unrecognised server (mcp.box.com)

    .mcp.json · mcp_risk:M9

low · 5

  • low

    daloopa: connects to mcp.daloopa.com (catalogued, not verified)

    .mcp.json · mcp_risk:M9

  • low

    morningstar: connects to mcp.morningstar.com (catalogued, not verified)

    .mcp.json · mcp_risk:M9

  • low

    factset: connects to mcp.factset.com (catalogued, not verified)

    .mcp.json · mcp_risk:M9

  • low

    lseg: connects to api.analytics.lseg.com (catalogued, not verified)

    .mcp.json · mcp_risk:M9

  • low

    egnyte: connects to mcp-server.egnyte.com (catalogued, not verified)

    .mcp.json · mcp_risk:M9

info · 2

  • info

    sp-global: connects to kfinance.kensho.com (verified in the MCP catalog)

    .mcp.json · mcp_risk:M9

  • info

    pitchbook: connects to premium.mcp.pitchbook.com (verified in the MCP catalog)

    .mcp.json · mcp_risk:M9

Versions

Version history

Each distinct content we have seen, newest first, with the verdict it got at the time.

One version so far: v1 (0.1.2), seen 2026-11-03.

Files

Files

40 files, 264 KB in total. Names only; open them on GitHub.

  • .claude-plugin/plugin.json
  • .mcp.json
  • commands/3-statement-model.md
  • commands/competitive-analysis.md
  • commands/comps.md
  • commands/dcf.md
  • commands/debug-model.md
  • commands/lbo.md
  • commands/ppt-template.md
  • hooks/hooks.json
  • skills/3-statement-model/SKILL.md
  • skills/3-statement-model/references/formatting.md
  • skills/3-statement-model/references/formulas.md
  • skills/3-statement-model/references/sec-filings.md
  • skills/audit-xls/SKILL.md
  • skills/clean-data-xls/SKILL.md
  • skills/competitive-analysis/SKILL.md
  • skills/competitive-analysis/references/frameworks.md
  • skills/competitive-analysis/references/schemas.md
  • skills/comps-analysis/SKILL.md
  • skills/dcf-model/SKILL.md
  • skills/dcf-model/TROUBLESHOOTING.md
  • skills/dcf-model/requirements.txt
  • skills/dcf-model/scripts/validate_dcf.py
  • skills/deck-refresh/SKILL.md
  • skills/ib-check-deck/SKILL.md
  • skills/ib-check-deck/references/ib-terminology.md
  • skills/ib-check-deck/references/report-format.md
  • skills/ib-check-deck/scripts/extract_numbers.py
  • skills/lbo-model/SKILL.md
  • skills/ppt-template-creator/SKILL.md
  • skills/pptx-author/SKILL.md
  • skills/skill-creator/LICENSE.txt
  • skills/skill-creator/SKILL.md
  • skills/skill-creator/references/output-patterns.md
  • skills/skill-creator/references/workflows.md
  • skills/skill-creator/scripts/init_skill.py
  • skills/skill-creator/scripts/package_skill.py
  • skills/skill-creator/scripts/quick_validate.py
  • skills/xlsx-author/SKILL.md

See and control which skills your people use

Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.

30 minutes. No commitment.

SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF

More finance skills and plugins

See all