FW-trading

• Analyzed: May 17, 2026, 7:50 AM
• Findings: 1
• Version: 1.0.6
• Hash: 82d1ada04c5d3d912816144bfa156949755d4cb06da66669a1b5f725c3f6a5ad
• Source: palm
• External report: View on VirusTotal

Findings (1)

The `fw-tradings` skill bundle is a legitimate and well-structured integration for the Fosun Wealth OpenAPI. It provides comprehensive tools for market data, account management, and trading across HK, US, and A-share markets. The bundle includes significant safety and security features, such as local RSA/EC key generation via `genkey.sh`, mandatory user confirmation for all financial transactions (orders, modifications, cancellations), and strict 'no-tamper' instructions in `SKILL.md` to ensure the AI agent reports financial data accurately. Credential management is handled locally in `fosun.env`, and the onboarding process uses official Fosun endpoints (`openapi.fosunxcz.com`). No evidence of malicious intent, data exfiltration, or unauthorized execution was found.