jy-transaction-analysis

This skill appears to do what it claims: parse pasted A‑share trade text and call a market‑data service (via the mcporter CLI) to enrich analysis and generate a self-contained HTML report. Before installing/using it: (1) be aware you will need to obtain a JY_API_KEY from the listed data provider and configure mcporter locally — the skill's registry metadata does not list this key, which is an omission; (2) mcporter is installed via npm globally — verify the mcporter package (npm page / GitHub) and consider installing in a controlled environment or container if you are cautious; (3) the mcporter config command stores the token locally (in a config file) — keep that key secret and understand where it is saved (mcporter config path); (4) the skill will make outbound calls to api.gildata.com endpoints to fetch market data — if you cannot or do not want external network calls, do not configure the key or use the skill; (5) if you need higher assurance, request the author to add JY_API_KEY and the mcporter config path to the skill manifest (requires.env / requires.config paths), and to publish links to the mcporter source for vetting. If any of these points are unacceptable, do not install or run the skill until they are clarified.