Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed A-share market data helper that calls a named external stock-data API and does not include local code, persistence, or hidden behavior.
Before installing, confirm you trust the stock.quicktiny.cn service and understand that your LB_API_KEY will be used in API calls to the configured LB_API_BASE. Treat the returned market interpretation as informational, not trading advice, and note that the skill's limit-up related market fields are broader than its stated exclusion of limit-up board analysis.
The manifest explicitly excludes 'limit-up board analysis', yet the same skill description and endpoint docs include limit_up_count, limit_down_count, limit_up_broken_count, limit_up_broken_ratio, and analysis guidance around these signals. That is a semantic mismatch between the claimed prohibited use and the actual capability exposed by the skill.
The file frames the skill as basic A-share market data, but the market overview section adds interpretive guidance such as judging market strength and profitability effect. This does not rise to news intelligence, but it stretches beyond purely neutral data access and weakens the manifest's narrow-scope claim.
No suspicious patterns detected.
