Is stock-skill safe to install?

Security audit of xiongcp/stock-skill · Claude Skill by xiongcp · ★ 56

⚠ CAUTION Basic audit · rule-based scan · 42 published rules

Use with caution — stock-skill triggered warning flags in AgentSkillsHub's security scan. It may be fine for personal trials, but review its credential handling and maintainer before brand or production use.

What it is: AI agent skill (Claude Code / Codex) for deterministic K-line structure analysis of A-shares, HK & US stocks: triple-barrier risk plans, 15-day normal volatility range, no-lookahead backtest, JSON + PNG + offline HTML from real market data. A股/港股/美股 K线结构识别与风控研究技能，真实行情、无前视回测。仅供研究，不构成投资建议。

Red flags detected (1)

🚩 sudo usage

Audit summary

Security grade	⚠ CAUTION
Quality score	62/100
GitHub stars	56
Language	Python
License	Apache-2.0
Last updated	2026-11-02

Check before you install

What credentials does it ask for, and where are they stored?
Is the maintainer identifiable and the repo actively maintained?
Read the install scripts and network calls before trusting it.

Run a live scan → Full details & install 5-dimension deep audit

Related Claude Skill audits

Is skills safe? — SAFE · ★ 184.5k
Is claude-code safe? — SAFE · ★ 154.5k
Is claude-mem safe? — SAFE · ★ 113.1k
Is archify safe? — SAFE · ★ 93.6k
Is Understand-Anything safe? — SAFE · ★ 89.6k
Is career-ops safe? — SAFE · ★ 80.3k

Browse all Claude Skill skills →

This is AgentSkillsHub's free basic audit: an automated rule-based scan with 42 published rules built on SlowMist's agent-security taxonomy (credential theft, obfuscated payloads, privilege escalation, covert instructions to the agent, and more) across 186,000+ open-source AI agent skills and MCP servers, refreshed every 8 hours. A CAUTION grade is a scan result, not a guarantee — deep 5-dimension audits (code · credentials · vendor · supply-chain · operational) are available for enterprise. Audited: 2026-11-03.