Security audit
Security checks across malware telemetry and agentic risk
This market-report skill is not clearly malicious, but it should be reviewed because it runs local and cross-skill scripts, writes and deletes report history, and overstates some financial-data safeguards.
Install only if you are comfortable with a skill that fetches live financial/news data, runs other local OpenClaw skills by path, stores report/cache files, and may delete prior report history. Review or modify the retention command, remove shell=True subprocess calls, pin or vendor the external helper scripts, and do not rely on the advertised 24-hour and anti-hallucination guarantees until they are implemented and tested.
cmd = f"uv run {script_path} {' '.join(all_codes)}"
try:
result = subprocess.run(cmd, shell=True, capture_output=True, text=True, timeout=30)
# 解析输出 - 按顺序匹配
lines = result.stdout.strip().split('\n')[2:] # 跳过表头
data = {}cmd = f"uv run {script_path} {symbol}"
try:
result = subprocess.run(cmd, shell=True, capture_output=True, text=True, timeout=30)
# 解析: "Bitcoin (BTC): $67,947.09"
line = result.stdout.strip()
if "$" in line:cmd = f"uv run {script_path} {' '.join(all_codes)}"
try:
result = subprocess.run(cmd, shell=True, capture_output=True, text=True, timeout=30)
# 解析输出 - 按顺序匹配
lines = result.stdout.strip().split('\n')[2:] # 跳过表头
data = {}cmd = f"uv run {script_path} {symbol}"
try:
result = subprocess.run(cmd, shell=True, capture_output=True, text=True, timeout=30)
# 解析: "Bitcoin (BTC): $67,947.09"
line = result.stdout.strip()
if "$" in line:cmd = f"uv run {script_path} {' '.join(all_codes)}"
try:
result = subprocess.run(cmd, shell=True, capture_output=True, text=True, timeout=30)
# 解析输出 - 按顺序匹配
lines = result.stdout.strip().split('\n')[2:] # 跳过表头
data = {}cmd = f"uv run {script_path} {symbol}"
try:
result = subprocess.run(cmd, shell=True, capture_output=True, text=True, timeout=30)
# 解析: "Bitcoin (BTC): $67,947.09"
line = result.stdout.strip()
if "$" in line:VirusTotal findings are pending for this skill version.
No suspicious patterns detected.