stock-screener-cn

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing unpinned packages can pull whatever versions are current at install time, including future versions with different behavior.

Why it was flagged

The skill asks the user to install unpinned third-party Python packages. This is expected for a stock-data screener, but package versions and provenance are not constrained in the artifact.

Skill content

pip install akshare pandas numpy

Recommendation

Install in a virtual environment, verify package sources, and consider pinning known-good versions of akshare, pandas, and numpy.