Hk Stock Predictor

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is an instruction-only Hong Kong stock research workflow that appears purpose-aligned, with minor install and provenance documentation caveats to verify.

This skill appears safe to use as an instruction-only finance research template. Verify any external data it uses, do not treat outputs as investment advice, and inspect any install script or source repository separately if you choose to use the README/INSTALL commands.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installation instructions may lead a user to look for or run code that was not part of this reviewed artifact set.

Why it was flagged

The install documentation references a local helper script, but the supplied manifest contains only text files and no scripts. This does not show malicious behavior, but users should not run a similarly named script from another source without inspecting it.

Skill content
bash scripts/install-hk-stock-predictor-skill.sh
Recommendation

Install the reviewed instruction-only skill through the trusted registry path, or inspect any external/local install script before running it.

What this means

A user could over-trust the skill if they mistake the HKEX link for official provenance or support.

Why it was flagged

The metadata points repository/support fields at HKEX rather than a source repository for this skill. That may be intended as a data-source reference, but users should not read it as proof of HKEX authorship or endorsement.

Skill content
"repository": "https://www.hkex.com.hk/", "support": { "website": "https://www.hkex.com.hk/" }
Recommendation

Treat the HKEX link as a market-data reference only unless the publisher provides clear evidence of official affiliation or a real source repository.