AI Stock Master 股票大师
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This stock-analysis skill is mostly coherent and purpose-aligned, but it calls an external TTfox server, needs a manual Python dependency, and users should treat its financial recommendations cautiously.
This skill appears aligned with its stated stock-analysis purpose and does not show credential theft, file access, persistence, or destructive behavior. Before installing, be comfortable with queries going to TTfox, install the Python dependency carefully, and treat any buy/sell-style output as delayed research rather than professional financial advice.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your requested stock symbols, sectors, or market-analysis queries may be sent to TTfox’s external server.
The driver sends market, sector, and stock-analysis requests to an external TTfox service, which is central to the skill’s stated purpose and is also disclosed in the documentation.
self.base_url = "https://master.ttfox.com"
Install only if you are comfortable using TTfox as the data provider; avoid including personal or confidential trading context in prompts.
You may need to install a Python package yourself before the skill works.
The README requires installing the `requests` package, but the registry install specification does not declare an install step. This is a common dependency and purpose-aligned, but users should notice the manual package install.
pip install requests
Install dependencies from a trusted Python environment and consider pinning or reviewing package versions if used in a sensitive setup.
The skill may influence financial decisions, but its own documentation says the data may be delayed and is not investment advice.
The skill is designed to provide recommendation-style stock analysis, so users may place significant trust in its output. The README separately warns that the data is delayed and for educational or academic use.
Triggers: Diagnose Stock, Analyze Stock, Should I buy, Stock Analysis + ticker/name
Treat outputs as research only, verify against current market data, and do not rely on the skill as personalized financial advice.