Quant Trading CN

• Analyzed: May 12, 2026, 4:20 AM
• Findings: 1
• Version: 1.0.0
• Hash: 141554241ff2e7f3dd6ec0d30a1409763c5dc43fe8c7ef3e22312eea2f07118b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed to assist in building quantitative trading bots, involving interaction with live trading APIs and local file system operations. While the extensive documentation (KNOWLEDGE.md, NUANCES.md) focuses on secure and robust development practices, the skill explicitly instructs the AI agent to execute local shell scripts (`./scripts/wizard.sh`, `./scripts/universe-fetch.sh`, `./scripts/check-code.sh`) as described in `SKILL.md` and `README.md`. The content of these scripts is not provided, and their direct execution introduces a potential vulnerability surface (e.g., shell injection) if not properly secured. This inherent risk of executing unknown shell code, even if the stated purpose is legitimate, leads to a 'suspicious' classification.