Is go-stock safe to install?

Security audit of ArvinLovegood/go-stock · Agent Tool by ArvinLovegood · ★ 7.9k

✓ SAFE Basic audit · rule-based scan · 42 published rules

Yes — go-stock passed AgentSkillsHub's rule-based security scan with no dangerous patterns detected. As with any third-party skill, confirm what credentials it requests before production use.

What it is: 🦄🦄🦄AI赋能股票分析：AI加持的股票分析/选股工具。股票行情获取，AI热点资讯分析，AI资金/财务分析，涨跌报警推送。支持A股，港股，美股。支持市场整体/个股情绪分析，AI辅助选股等。数据全部保留在本地。支持DeepSeek，OpenAI， Ollama，LMStudio，AnythingLLM，硅基流动，火山方舟，阿里云百炼等平台或模型。

No dangerous patterns were detected: no credential exfiltration, no obfuscated downloads, no sandbox-escape attempts, no prompt-injection markers.

Audit summary

Security grade	✓ SAFE
Quality score	53/100
GitHub stars	7.9k
Language	Go
License	GPL-3.0
Last updated	2026-10-24

Check before you install

What credentials does it ask for, and where are they stored?
Is the maintainer identifiable and the repo actively maintained?
Read the install scripts and network calls before trusting it.

Run a live scan → Full details & install 5-dimension deep audit

Related Agent Tool audits

Is superpowers safe? — SAFE · ★ 304.6k
Is skills safe? — SAFE · ★ 265.8k
Is AutoGPT safe? — SAFE · ★ 187.7k
Is ollama safe? — SAFE · ★ 184.6k
Is ponytail safe? — SAFE · ★ 166.3k
Is langflow safe? — SAFE · ★ 156.0k

Browse all Agent Tool skills →

This is AgentSkillsHub's free basic audit: an automated rule-based scan with 42 published rules built on SlowMist's agent-security taxonomy (credential theft, obfuscated payloads, privilege escalation, covert instructions to the agent, and more) across 186,000+ open-source AI agent skills and MCP servers, refreshed every 8 hours. A SAFE grade is a scan result, not a guarantee — deep 5-dimension audits (code · credentials · vendor · supply-chain · operational) are available for enterprise. Audited: 2026-10-24.