Aky Select

• Outcome: Review
• Latest audit: Sep 16, 2026 · 7:56 AM UTC
• Version: 2.0.0

Overview

This appears to be a legitimate stock-screening skill, but its documentation includes an optional cron setup that creates persistent unattended execution.

Review the cron command before using the scheduled mode. The one-time Python run is the safer path. If you enable scheduling, track the crontab entry yourself, avoid duplicate entries, and be aware that future changes to the script or Python dependencies could run automatically under your user account.

A.I.G

Vulnerability Patterns

• System Persistence: Installs backdoors, hooks, services, or scheduled tasks that survive the run
• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review

Findings (2)

T06 · System Persistence

Error

• Location: SKILL.md:54

Finding

Recurring Cron Job Creates Persistent Unattended Execution

Content

View full analysis

/dev/null; echo "5 15 * * 1-5 cd ~/.openclaw/workspace && python3 skills/aky-select/scripts/aky_select.py >> skills/aky-select/logs/aky_\$(date +\%Y\%m\%d).log 2>&1") | crontab - ``` ### Technical Analysis The documented command modifies the current user's crontab and configures the Skill to execute automatically at 15:05 every weekday. The scheduled task survives the current Skill invocation and future login sessions. Persistent scheduling is optional convenience functionality rather than a prerequisite for the declared stock-screening operation. The core operation can be performed through the documented one-time invocation. Therefore, modifying persistent user configuration exceeds the minimum access necessary to perform an individual screening. The cron entry executes a script through a path inside the user's writable workspace. If that script, its directory, the Python interpreter resolution, or an imported dependency is subsequently modified, the altered code will run unattended at the next scheduled interval. The command also appends an identical entry every time it is executed, so repeated setup can create duplicate scheduled executions, duplicated network traffic, and additional log growth. The persistence is disclosed rather than hidden, and it is only installed if the user follows the command. Nevertheless, the resulting execution remains persistent and carries the authority of the user who owns the crontab. ### Attack Path 1. The user follows the scheduling instructions in `SKILL.md`. 2. The command appends the recurring entry to the user's crontab. 3. The task remains active after the current terminal or agent session ends. 4. The referenced script or one of its imported dependencies is later replaced, com ...[truncated 1186 chars]

Remediation

View remediation

T08 · Insecure Dependencies

Warning

• Location: SKILL.md:13

Finding

Unpinned Third-Party Dependency Exposes Scheduled Execution to Supply-Chain Changes

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Rogue Agent: Self-Modification, Session Persistence
• YARA Signatures: Malware Match, Webshell Match, Cryptominer Match
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (3)

YARA rule 'backdoor_persistence': Backdoor persistence with malicious payloads (shell commands, SSH key injection, hidden root users) [malware]

High

• Category: YARA Match
• Confidence: 86% confidence

Finding

The YARA hit is triggered by a classic persistence pattern: appending a new entry to the user's crontab. Although the command shown runs a stock-selection script rather than an overtly malicious payload, the mechanism is identical to malware persistence techniques and is dangerous because it establishes silent recurring execution that may later run altered code or consume network/system resources indefinitely.

Content

Scanner excerpt · SKILL.md (reported line 55)May include surrounding context.

�价线上方 | 价格 > 全天均价 | 全天强势运行 | | ⑨ | 3日资金净流入 | 主力净流入累计 > 0 | 主力资金持续买入 |

使用方法

一键运行

bash

cd ~/.openclaw/workspace && python3 skills/aky-select/scripts/aky_select.py

定时任务

每天 15:05（收盘后5分钟）自动跑：

bash

mkdir -p ~/.openclaw/workspace/skills/aky-select/logs
(crontab -l 2>/dev/null; echo "5 15 * * 1-5 cd ~/.openclaw/workspace && python3 skills/aky-select/scripts/aky_select.py >> skills/aky-select/logs/aky_\$(date +\%Y\%m\%d).log 2>&1") | crontab -

依赖

• akshare ≥ 1.18.50（已预装）
• pandas（已预装）
• numpy（已预装）

数据来源

数据	接口	源站
实时行情	stock_zh_a_spot_em	东方财富
历史日线	stock_zh_a_hist	东方财富
上证指数	stock_zh_index_spot_em	东方财富
Tick（均价）	stock_zh_a_tick_tx_js	腾讯
资金�

Session Persistence

Medium

• Category: Rogue Agent
• Confidence: 78% confidence

Finding

This finding is part of the same persistence behavior: creating a dedicated logs directory to support an automatically installed cron task. By itself directory creation is harmless, but in context it facilitates unattended recurring execution and log retention for the scheduled task, so it contributes to persistent behavior.

Content

Scanner excerpt · SKILL.md (reported line 54)May include surrounding context.

每天 15:05（收盘后5分钟）自动跑：

bash

mkdir -p ~/.openclaw/workspace/skills/aky-select/logs
(crontab -l 2>/dev/null; echo "5 15 * * 1-5 cd ~/.openclaw/workspace && python3 skills/aky-select/scripts/aky_select.py >> skills/aky-select/logs/aky_\$(date +\%Y\%m\%d).log 2>&1") | crontab -

Session Persistence

Medium

• Category: Rogue Agent
• Confidence: 90% confidence

Finding

The skill instructs the user to install a cron job that persists across sessions and executes code automatically every weekday. While the payload appears to be the advertised stock-screening script rather than an obvious backdoor, persistence is still security-relevant because it creates ongoing code execution and could continue running modified or compromised script content later without additional user review.

Content

Scanner excerpt · SKILL.md (reported line 55)May include surrounding context.

bash

mkdir -p ~/.openclaw/workspace/skills/aky-select/logs
(crontab -l 2>/dev/null; echo "5 15 * * 1-5 cd ~/.openclaw/workspace && python3 skills/aky-select/scripts/aky_select.py >> skills/aky-select/logs/aky_\$(date +\%Y\%m\%d).log 2>&1") | crontab -

依赖