Security audit
Security checks across malware telemetry and agentic risk
This stock-screening skill is mostly purpose-aligned, but its helper script can run shell commands built from unvalidated stock-code inputs.
Install only if you trust the candidate-code sources and are comfortable with a skill that runs local shell/npx commands for stock data. Avoid using untrusted pool files or upstream signal files with this version; malformed stock codes could cause unintended shell execution. Treat outputs as screening signals, not investment advice.
def run_cmd(cmd, cwd=None, timeout=60):
"""执行命令并返回 stdout 和 success 标记"""
try:
result = subprocess.run(
cmd, shell=True, capture_output=True, text=True,
timeout=timeout, cwd=cwd
)def run_cmd(cmd, cwd=None, timeout=60):
"""执行命令并返回 stdout 和 success 标记"""
try:
result = subprocess.run(
cmd, shell=True, capture_output=True, text=True,
timeout=timeout, cwd=cwd
)def run_cmd(cmd, cwd=None, timeout=60):
"""执行命令并返回 stdout 和 success 标记"""
try:
result = subprocess.run(
cmd, shell=True, capture_output=True, text=True,
timeout=timeout, cwd=cwd
)VirusTotal findings are pending for this skill version.
No suspicious patterns detected.