Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Trading Quant

v1.0.0

量化交易数据分析工具。A股/美股/港股/贵金属实时行情,多维度评分(技术面+资金面+基本面),涨跌停池,北向资金,分钟级资金流。Use when: (1) 查询任何股票实时行情和评分, (2) 分析A股涨跌停异动, (3) 查看北向资金流向, (4) 美股港股贵金属行情, (5) 全球市场概览, (6) 个股资金...

0· 114·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description align with the included code: multiple data-source modules (Tencent, Sina, EastMoney, yfinance, akshare), scoring, technical/capital/sentiment analysis — these are expected. One mismatch: industry_classifier attempts to prefill from a watchlist at a relative path that climbs out of the package (../../../../..../knowledge/watchlist.json), which accesses files outside the skill bundle; this is not strictly required to provide the advertised functionality and could read unrelated user/agent data.
!
Instruction Scope
SKILL.md instructs running local Python scripts (quant.py) — expected. However, the runtime code may read and persist local files (e.g., /tmp/quant_industry_cache.json, ~/.cache/huggingface, and the external 'knowledge/watchlist.json' path outside the skill directory). The sentiment component also downloads HuggingFace models if not cached (network activity and large model files). The instructions do not call out these external file reads or large downloads, so the runtime behavior is broader than the SKILL.md description.
Install Mechanism
No install spec (instruction-only) and a requirements.txt lists standard Python libraries. This lowers install risk, but the sentiment module can download models from HuggingFace at runtime (expected for FinBERT-like analysis) — that will write large artifacts to the cache and perform outbound network requests.
Credentials
The skill does not declare required environment variables, credentials, or secrets. It uses optional environment variables (TRADING_WORKSPACE) to choose a workspace root and relies on default cache locations (e.g., ~/.cache/huggingface). No tokens/keys are requested, so credential scope is proportionate to the stated purpose.
Persistence & Privilege
always:false and agent invocation is normal. The code writes caches to /tmp, the HuggingFace cache (~/.cache/huggingface), and may create a workspace under ~/.openclaw/workspace-trading (or TRADING_WORKSPACE if set). It also persists an industry cache file at /tmp/quant_industry_cache.json. These are expected for this class of tool but do create persistent files on the host.
What to consider before installing
This skill appears to implement a real trading-analysis tool, but review these things before installing or running it: - Watchlist / external file access: industry_classifier tries to read a file at a relative path that escapes the package (../../../../..../knowledge/watchlist.json). That will access files outside the skill bundle if present — verify what that path would resolve to in your environment and ensure it won't read sensitive data. - Model downloads and network: the sentiment module can download HuggingFace models at runtime (large files and outbound network calls). If you need to restrict network or disk usage, run the skill in a sandbox/container, or pre-populate the model cache. - Persistent files: it writes caches to /tmp, ~/.cache/huggingface, and a workspace directory (~/.openclaw/workspace-trading by default). Clean these if you uninstall or run in an ephemeral environment. - No credentials requested: the skill doesn't require API keys or secrets in its metadata. However, the code relies on public data sources (Tencent, Sina, EastMoney, akshare, yfinance). If you plan to integrate private credentials later, inspect where those would be provided. - Dependency management: requirements.txt exists but no installer is provided. Pin and review Python package versions before pip installing; consider using a virtualenv. If you are uncomfortable with the external-file reads or model downloads, run the skill only in an isolated/containerized environment, or ask the author to remove or make explicit the watchlist-prefill behavior and to document expected network and disk usage.

Like a lobster shell, security has layers — review code before you run it.

latestvk9748qqx3pgzv7t317r484257d83axk9

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments