Czsc Thinking
PassAudited by ClawScan on May 6, 2026.
Overview
This skill is coherent stock-analysis guidance with optional example scripts; the main things to notice are the Tushare API token and external Python packages if you choose to run the scripts.
The written skill can be used as advisory trading-analysis guidance without granting system access. If you run the optional scripts, do so in a trusted project environment, install the Python dependencies carefully, protect your Tushare token, and treat all generated buy/sell signals as informational rather than automatic trading instructions.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If you run the data-fetching script, your Tushare token will be used to access Tushare services.
The script requires a user-provided Tushare API token and passes it to a Tushare-configured data client. This is expected for market-data retrieval, but it is still credentialed third-party access.
parser.add_argument('--token', type=str, required=True, help='Tushare API token') ... DataClient(url="https://api.tushare.pro", token=token, cache_path=cache_path, timeout=300)Use a token with only the needed Tushare access, avoid pasting it into shared logs or transcripts, and rotate it if it is exposed.
Running the optional scripts may install and execute third-party library code from your Python package source.
The scripts depend on external Python packages installed manually by the user. This is normal for the stated analysis workflow, but the dependencies are not pinned in the provided install instructions.
pip install czsc tushare pandas
Install dependencies from a trusted Python environment, review package sources/versions if needed, and consider pinning versions before use.