Trading_Agents_for_Futures
PassAudited by ClawScan on May 15, 2026.
Overview
This appears to be a coherent futures-analysis skill that fetches public market/news data and writes local cache/output files, with no artifact-backed evidence of credential theft, exfiltration, or account actions.
Before installing, be comfortable with Python dependency installation and external public market-data requests. Run it in a virtual environment, review cache/output paths, and treat the generated futures analysis as informational rather than automatic trading advice.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Running the skill can contact external financial-data sources and leave downloaded data in local cache files.
The skill fetches market data from external public providers and caches it locally. This is consistent with the stated futures data-engine purpose, but it is still network and file activity users should expect.
import akshare as ak ... df = ak.futures_main_sina(...) ... df.to_parquet(cache_file)
Run it in a controlled environment if network activity matters, and review or relocate the configured cache/output directories if needed.
Installing the skill can pull updated dependency versions from the Python package ecosystem.
The package has limited repository/homepage provenance in the manifest and relies on third-party Python packages with version ranges rather than exact pinned versions. This is common for Python skills but is still a supply-chain consideration.
repository: "" ... dependencies: - akshare>=1.14.0,<2.0.0 ... - requests>=2.28.0
Use a virtual environment and, for higher assurance, pin and verify dependency versions before installation.