Security audit
Security checks across malware telemetry and agentic risk
This is a real stock-analysis skill, but its data-update path and optional remote submissions create review-worthy security and privacy risk.
Review before installing. Use it only if you trust the publisher's backend and are comfortable with market-data updates downloading, decrypting, unzipping, and importing remote files into a local database. Configure BITSOUL_TOKEN only for this service, avoid invoking performance/positions submission unless you explicitly want leaderboard upload, and treat retraining or cache-clearing APIs as persistent state changes.
# 填充缺失值
if fill_method:
for key in list(panels.keys()):
panels[key] = getattr(panels[key], fill_method)()
# ── vwap ──────────────────────────────────────────────────────────
vol_safe = panels["volume"].replace(0, np.nan)log(f"开始下载 {file_name} ...")
log(f"下载地址: {download_url}")
with requests.get(download_url, stream=True, timeout=300) as response:
if response.status_code != 200:
log(f"下载失败，HTTP 状态码: {response.status_code}")
if retry < max_retries - 1:65/65 vendors flagged this skill as clean.