国泰海通证券-灵犀市场热榜查询

• Analyzed: May 10, 2026, 6:44 AM
• Findings: 1
• Version: 1.0.1
• Hash: 9de8fa76676c473c17d1924319e6e3ec46730910d92e20014136820edf81185c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate market data tool for Guotai Haitong Securities (Guotai Junan). It implements a mandatory QR-code-based authentication flow to manage API keys, which are stored in a shared directory (`gtht-skill-shared`). While the `SKILL.md` uses aggressive prompt-steering language (e.g., 'Highest Priority', 'Must obey first') to ensure the AI agent follows the authentication SOP and provides complete data tables without truncation, these instructions are aligned with the stated business purpose. The `skill-entry.js` script performs system-level tasks such as reading the MAC address for device binding and starting a temporary local HTTP server for authentication callbacks, which are standard practices for secure financial CLI tools. All external communications are directed to legitimate corporate domains (gtja.com and gtht.com).