Security audit
Security checks across malware telemetry and agentic risk
The skill appears intended for stock analysis, but it needs review because it gives investment-style recommendations while overstating data reliability and includes an unsafe remote shell installer pattern.
Install only after reviewing the installer and preferably using the manual git clone flow from a pinned commit instead of curl | bash. Treat outputs as informational research, not financial advice; verify prices, filings, qualitative claims, target prices, and AI-written conclusions independently before acting.
def check_a_stock_data_available():
"""检查 a-stock-data skill 是否已安装"""
skill_path = os.path.expanduser("~/.claude/skills/a-stock-data/SKILL.md")
return os.path.exists(skill_path)#!/bin/bash # HALO Skill 一键安装脚本 # 用法: curl -sL <url>/install.sh | bash set -e
#!/bin/bash # HALO Skill 一键安装脚本 # 用法: curl -sL <url>/install.sh | bash set -e
64/64 vendors flagged this skill as clean.
No suspicious patterns detected.