Xueqiu

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This instruction-only skill is limited to summarizing public Xueqiu posts and stock pages, with no code, credentials, trading, or bulk scraping shown.

This appears safe to install for public Xueqiu summaries. Before using it, remember it should stay limited to public pages, low request rates, and non-trading analysis.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may visit Xueqiu public pages and summarize public market or post metrics, but the artifacts do not show account access, trading, or bulk scraping.

Why it was flagged

The skill directs the agent to access and extract information from a third-party financial/community site. This is expected for the stated purpose and is bounded by no-bulk and no-trading instructions, but users should be aware of the web-automation aspect.

Skill content
面向公开帖子与行情页的检索与互动/数据摘要 ... 请求频率需控制,不进行批量抓取 ... 不进行交易或账户相关操作
Recommendation

Use it for lightweight public summaries only, keep request volume low, and do not use it for trading, login-based actions, or large-scale collection.