Security audit
Security checks across malware telemetry and agentic risk
This is a coherent A-share analysis skill, but it should be reviewed because it gives actionable trading guidance while storing local history and using external services without tight user controls.
Install only if you are comfortable with an agentic stock tool that can produce trading recommendations, contact external financial/news services, and retain analysis history in your OpenClaw workspace. Treat outputs as informational, review generated files periodically, avoid using it for personalized investment decisions, and be cautious with the Firecrawl authentication helper and documented rm -rf cleanup commands. VirusTotal was pending, so this verdict rests on artifact behavior rather than malware telemetry.
}
try:
result = subprocess.run(
[self.cli_path, "--status"],
capture_output=True,
text=True,return False
# 启动认证
result = subprocess.run(
[self.cli_path, "login", "--browser"],
timeout=120
)return None
try:
result = subprocess.run(
[self.cli_path, "credit-usage", "--json"],
capture_output=True,
text=True,### 清理报告 ```bash # 删除某支股票的所有报告 rm -rf a-share-reports/600519/ # 删除所有报告 rm -rf a-share-reports/*
rm -rf a-share-reports/600519/ # 删除所有报告 rm -rf a-share-reports/* ``` ---
61/61 vendors flagged this skill as clean.
No suspicious patterns detected.