股票查询 / Stock Price Query
PassAudited by ClawScan on May 1, 2026.
Overview
This stock-quote skill appears benign: it runs a bundled Python script to query a disclosed public market-data API and shows no credentials, persistence, or account-changing behavior.
This looks safe for ordinary stock-price lookups. Before installing, be aware that it runs a local Python script and sends queried stock codes to Tencent's public quote service; do not include personal or confidential information in the query.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill means allowing a local Python script included with the skill to run when stock quotes are requested.
The skill instructs the agent to run a bundled Python script for quote lookups. This is expected for the stated purpose and is not shown as an install hook or hidden execution path.
python3 {{SKILL_DIR}}/scripts/stock_query.py <stock_code> [market]Install only if you are comfortable running the bundled script for stock-query tasks; no evidence shows unrelated command execution.
The stock symbols or indexes you ask about may be visible to the external market-data provider.
The script sends the requested stock symbol to an external Tencent quote endpoint. This provider use is disclosed and purpose-aligned, but it is still an external data flow.
url = f"https://qt.gtimg.cn/q={symbol}"Avoid including personal or confidential information in stock-code inputs; use the skill only if this public API lookup is acceptable.