Trusted — Risk Score 5/100
Last scan:18 hr ago Rescan
5 /100
a-share-trader
A股核心交易框架 - 12种选股策略的自适应量化交易系统
This is a legitimate A-share (Chinese stock market) quantitative trading framework with 12 stock-picking strategies, adaptive market engine, and risk management. No malicious behavior detected.
Skill Namea-share-trader
Duration48.2s
Enginepi
Safe to install
This skill is safe to use. It operates locally with mock/simulated trading data and poses no security risks.
ResourceDeclaredInferredStatusEvidence
Filesystem NONE WRITE ✓ Aligned Logging and report generation to local directory
Network NONE NONE No external network connections found
Shell NONE NONE No shell execution detected
Environment NONE READ ✓ Aligned Standard Python imports, no sensitive env access
Database NONE NONE save_to_db config present but not implemented

File Tree

24 files · 285.5 KB · 7649 lines
Python 22f · 7368L Markdown 2f · 281L
├─ 📁 core
│ ├─ 🐍 a_share_trader.py Python 987L · 42.1 KB
│ ├─ 🐍 adaptive_engine.py Python 682L · 28.0 KB
│ ├─ 🐍 data_interface.py Python 362L · 13.7 KB
│ └─ 🐍 real_data_interface.py Python 350L · 13.3 KB
├─ 📁 strategies
│ ├─ 🐍 __init__.py Python 88L · 1.9 KB
│ ├─ 🐍 base_strategy.py Python 407L · 13.3 KB
│ ├─ 🐍 chip_concentration.py Python 303L · 11.2 KB
│ ├─ 🐍 defensive.py Python 296L · 10.6 KB
│ ├─ 🐍 fundamental.py Python 299L · 10.5 KB
│ ├─ 🐍 oversold_rebound.py Python 350L · 13.3 KB
│ ├─ 🐍 quality_small_cap.py Python 263L · 9.5 KB
│ ├─ 🐍 resonance.py Python 565L · 20.8 KB
│ ├─ 🐍 revenue_profit.py Python 297L · 10.7 KB
│ ├─ 🐍 small_cap_growth.py Python 372L · 13.7 KB
│ ├─ 🐍 small_cap.py Python 352L · 13.5 KB
│ ├─ 🐍 social_security.py Python 285L · 10.3 KB
│ └─ 🐍 swing_trading.py Python 244L · 9.2 KB
├─ 🐍 quick_start_optimized.py Python 236L · 8.5 KB
├─ 🐍 quick_start.py Python 190L · 6.3 KB
├─ 📝 README.md Markdown 184L · 5.7 KB
├─ 📝 SKILL.md Markdown 97L · 3.5 KB
├─ 🐍 strategy_optimizer.py Python 249L · 9.0 KB
├─ 🐍 test_simple.py Python 101L · 3.5 KB
└─ 🐍 test_strategies_detailed.py Python 90L · 3.2 KB

Security Positives

✓ No shell execution (subprocess, os.system, eval, exec)
✓ No credential harvesting (no ~/.ssh, .env, API key access)
✓ No data exfiltration (no external network connections)
✓ No code obfuscation (no base64, encoded strings)
✓ No reverse shell patterns
✓ No malicious downloads (no curl|bash, wget|sh)
✓ Local-only file operations (logging, JSON reports)
✓ Uses mock/simulated data interface by default
✓ Dynamic strategy loading is appropriate for plugin architecture
✓ Clean codebase with proper error handling