Security audit
Security checks across malware telemetry and agentic risk
This finance data skill is mostly coherent, but it needs Review because batch modes can write to caller-chosen local paths and one advertised sentiment feature returns mock news as if it were fetched data.
Install only if you are comfortable with local batch data collection. Use a virtual environment, keep output and status paths inside the skill’s own data/config directories, avoid custom status_file or data_path values, monitor disk/network usage for batch jobs, and do not rely on single-stock public_opinion output for real financial sentiment until it is fixed or clearly labeled as mock data.
def write_status(status_file: str, status: Dict[str, Any]) -> bool:
try:
os.makedirs(os.path.dirname(status_file), exist_ok=True)
with open(status_file, 'w', encoding='utf-8') as f:
json.dump(status, f, ensure_ascii=False, indent=2)
return True
except IOError:66/66 vendors flagged this skill as clean.