baostock_tt_skills

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a legitimate BaoStock market-data helper; it installs Python data packages and queries an external financial data service, with no evidence of credential theft, persistence, or destructive behavior.

Before installing, make sure you are comfortable using third-party Python packages and sending stock-query requests to BaoStock. For large all-market scans, require a clear confirmation of scope and duration.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the skill may install or use third-party Python packages from the package ecosystem.

Why it was flagged

The skill depends on external Python packages using lower-bound version constraints, so future package versions could change behavior even though this is normal for a Python data-analysis skill.

Skill content
baostock>=0.8.0
pandas>=1.5.0
Recommendation

Install in an environment you trust and consider pinning known-good package versions if reproducibility matters.

What this means

A full-market scan could take a long time and generate many requests to the data provider.

Why it was flagged

The skill can perform broad market scans involving thousands of stock queries, but the artifact also requires explicit user confirmation before doing so.

Skill content
全市场扫描 (5,000+股票) 耗时长,**必须提示用户确认后再执行**
Recommendation

Confirm the scan scope and expected duration before allowing all-market scans.

What this means

Stock symbols and query ranges may be sent to BaoStock when the skill retrieves data.

Why it was flagged

The script sends stock-code and date-range queries to the external BaoStock provider, which is disclosed and central to the skill's purpose.

Skill content
lg = bs.login(); rs = bs.query_history_k_data_plus(code, "date,open,high,low,close,volume", ...)
Recommendation

Use the skill only if you are comfortable sending market-data queries to BaoStock; no credentials or private local data handling is evidenced.