Security audit

财经指数通

Security checks for vulnerabilities and agentic risk

Overview

The SKILL.md describes a harmless finance index assistant, but the package includes installer/CLI/plugin code that writes persistent files, modifies OpenClaw config, and pulls updates from remote URLs — behavior that is out-of-scope for a read-only content skill and deserves caution.

The SKILL.md describes a safe-seeming finance assistant, but the package also includes an installer/CLI and an OpenClaw plugin that (if you run the installer) will write files to your home dir, create executables, set a remote self-update URL, and alter OpenClaw configuration to prefer a private registry. Before installing: - Do NOT run install.sh or cli/install.sh unless you trust the publisher and the download hosts (skillhub-1388575217.cos.ap-guangzhou.myqcloud.com and lightmake.site). - Ask the author why a content-only skill bundles a skills-store CLI and plugin that modify OpenClaw behavior and add auto-update URLs; these are out-of-scope for an index-explanation assistant. - If you want only the conversational part, install nothing and copy only SKILL.md and the references files into a controlled sandbox; avoid running the provided installers. - If you must test the installer, do so in an isolated VM or disposable account; inspect the downloaded archive before executing and verify TLS certificates and manifest URLs. - Consider requesting a minimal, install-free package (SKILL.md + references) or an explicit, signed installer with clear update policy and an auditable provenance for the remote update host. If you want, I can: (1) point to the exact lines/files that create wrappers and set remote update URLs, (2) summarize the network endpoints embedded in the package, or (3) draft questions to ask the publisher to clarify why this packaging is necessary.

Static analysis

No suspicious patterns detected.