stock-watchlist-zh

• Analyzed: Apr 18, 2026, 12:56 PM
• Findings: 1
• Version: 1.0.0
• Hash: b33589fb21199a10d8f2032b00ace65272d6d3ee138207f66d4b621c61c55b88
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate stock and cryptocurrency watchlist manager that uses the AIsa API to fetch market data and signals. The Python script (scripts/watchlist.py) implements standard CRUD operations and alert logic without any signs of malicious execution, data exfiltration, or obfuscation. Notably, the SKILL.md file includes defensive instructions explicitly telling the AI agent not to use the skill for accessing sensitive local credentials, which is a positive security indicator.