Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed offline stock-analysis teaching demo that writes only local config/report files, with an optional cron schedule users should review before enabling.
Install only if you want a Chinese-language, offline educational stock-analysis demo. Review config.json before use, treat all output as simulated and not financial advice, and enable the crontab example only if you intentionally want recurring weekday execution; remove that cron entry to stop scheduled runs.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
crontab -e
添加：
The skill documents file system operations such as copying files into the OpenClaw workspace and writing local logs, but it does not declare any explicit tool scope or permissions. This creates a mismatch between stated metadata and effective capabilities, which can lead to over-privileged execution or make security review and sandboxing less reliable.
The file’s natural-language instructions, description, and usage guidance are all presented in Chinese, and there is no opt-in, alternative language, or note that the skill is intended only for a Chinese-speaking audience. Under the policy, forcing a specific language without user choice can be a natural-language policy violation.
The skill encourages persistence via a cron job, which establishes recurring execution without additional user confirmation after setup. Even though the skill claims to be offline and educational, persistence increases risk because any future code change, local compromise, or misuse of the script would run automatically on a schedule.
crontab -e
This markdown file is entirely written in Chinese and does not indicate that the user can choose another language or locale. The policy requires flagging language or locale constraints when a skill forces a specific language without user opt-in.
The file-level docstring and all user-facing strings are written exclusively in Chinese, presenting the skill as a general stock analysis tool rather than a clearly region- or locale-restricted utility. The policy requires either user language choice or a documented justification for the fixed locale, which is not present here.
The manifest frames the skill as a simulation-only educational system, which implies limited demonstration behavior. In practice, the code persists real local state by creating and reading config.json with holdings and a user identifier, so it does more than just transient simulation in memory.
Although the market data is simulated, the code saves a dated markdown briefing under a logs directory. This is broader behavior than a minimal simulated teaching demo because it persists generated outputs locally.
No suspicious patterns detected.