Security checks across malware telemetry and agentic risk
This trading skill can place real broker orders and send Feishu messages, but its scope, credentials, simulation claims, and recipient handling are not controlled clearly enough for automatic approval.
Install only after reviewing the code and replacing all credentials, account IDs, Feishu app secrets, and open_id values. Treat the trading scripts as capable of live broker orders, not just simulation. Use a paper account first, disable or remove auto-trade loops and crontab scheduling until you understand each script, and do not rely on the included backtest/performance claims as real validation.
"--target", FEISHU_USER_OPEN_ID,
"--message", message
]
result = subprocess.run(cmd, capture_output=True, text=True, timeout=30)
if result.returncode == 0:
print("\n✅ 监控完成，推送成功")"--target", FEISHU_USER_OPEN_ID,
"--message", message
]
result = subprocess.run(cmd, capture_output=True, text=True, timeout=30)
if result.returncode == 0:
print("\n✅ 监控完成，推送成功")66/66 vendors flagged this skill as clean.