allstock-data

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to be a straightforward stock-market data lookup guide that uses public finance APIs and an optional Python data package.

This looks safe for ordinary stock quote and market-data queries. Be aware that stock codes are sent to external finance APIs, and only install the optional adata package if you trust that dependency and need its expanded features.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Stock symbols you ask about may be sent to the external finance data provider.

Why it was flagged

The skill instructs use of curl to query Tencent Finance endpoints. This is purpose-aligned for stock data lookup, but it does involve external network requests.

Skill content
curl -s "http://qt.gtimg.cn/q=sh600519"
Recommendation

Use it for non-sensitive market lookups and avoid placing private account, portfolio, or credential information into query parameters.

What this means

If you choose the optional SDK path, your environment will install and run code from the Python package ecosystem.

Why it was flagged

The skill documents an optional third-party Python package installation without pinning a version. This is not suspicious by itself, but users should recognize the dependency before installing it.

Skill content
pip install adata
Recommendation

Prefer the default no-install HTTP API path unless you need adata features; if installing adata, verify the package source and consider pinning a trusted version.