HK IPO Review Optimizer

• Risk level: Low
• Analyzed: Apr 16, 2026, 11:31 PM
• Findings: 0
• Version: 0.1.0

Overview

The skill appears internally consistent with its stated purpose (a local CLI for reviewing Hong Kong IPOs): it requires the 'uv' runner and a local sqlite DB, ships a full CLI runtime that performs web requests to public IPO data sources, and does not ask for unrelated credentials or system-wide privileges.

This skill bundles an entire CLI runtime and will: (1) write/read a local sqlite DB at ~/.hkipo-next/data/hkipo.db, and (2) make outbound HTTP requests to multiple public IPO data sources (AAStocks, AiPO, HKEX, Tencent APIs, etc.). No credentials are requested, which is proportionate, but you should: verify the skill's source/author (no homepage/source provided), inspect the bundled runtime if you can, and confirm the Homebrew 'uv' formula provenance before installing. If you are cautious, run it in an isolated environment (container or VM), back up or sandbox ~/.hkipo-next/data/hkipo.db, and monitor outbound network connections during first runs.