jcf-replication-and-data-policy — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited jcf-replication-and-data-policy (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
JCF follows Elsevier "Research Data" Option C. Authors are required to state data availability at submission and are encouraged to deposit research data — including software, code, models, and algorithms — in a relevant repository and cite/link it, or provide a statement explaining why the data cannot be shared.
There is no dedicated JFE-Data-Archive-style mandatory replication-package mandate for JCF (待核实 / none found): the policy is the standard Elsevier data-availability-statement framework, not a finance-society mandatory code/data archive.
run_all) regenerating every table/figureSource | Deposit raw? | What to deposit instead
Compustat / CRSP / CCM | No (license) | Pull scripts, link rules, filter code, variable formulas
SDC Platinum / Refinitiv | No | Deal-screen criteria, query dates, cleaning code
DealScan | No | Facility-match code; loan-level filter documentation
BoardEx / ISS / Execucomp | No | Classification rules; year-by-year coverage notes
Hand-collected governance | Usually yes | The dataset itself with a DOI + collection protocol
EDGAR / public filings text | Yes | Scraper code, parsed extracts, dictionary files
Derived firm-year variables | Check terms | Many vendors bar derived-data sharing — confirm firstWhen in doubt about derived data, describe the construction completely rather than deposit — a license breach is worse than an opaque archive.
Illustrative Option C wording for a governance paper combining BoardEx with hand-collected charter amendments:
Data availability: Board and director data were obtained from BoardEx under license and cannot be
redistributed; access instructions and full variable-construction code are provided at [DOI]. The
hand-collected charter-amendment dataset and all analysis code are deposited at [repository, DOI].
Compustat and CRSP inputs are available from WRDS under subscription.Adapt the names and repositories; the structure — what is licensed, what is deposited, where the code lives — is what the editor checks.
archive/
README.md # inputs, licenses, runtime, expected outputs
run_all.do|.R|.py # single entry point; table/figure numbering matched
build/ # pull + clean scripts per source (compustat.do, boardex.R, sdc.py)
analysis/ # one script per exhibit (t3_main_did, f2_event_study)
handcollected/ # shareable data + collection protocol
output/ # regenerated exhibits land hereNumber analysis scripts by exhibit so an R&R that renumbers tables is a rename, not an archaeology project. JCF revisions routinely add robustness exhibits; an archive organized per-exhibit absorbs them without breaking run_all.
【DAS】Option C statement drafted? [Y/N]
【Archive】run_all + versions + seeds + var-construction? [Y/N each]
【Deposit】DOI for shareable data/code? [Y/N]; licensed-data note? [Y/N]~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.