Scan Report
5 /100
A股短线交易决策 A-Share Short-Term Decision
A-share short-term trading decision skill for 1-5 day horizon using AkShare for real/historical market data
A legitimate A-share short-term trading analysis skill with clean code, no shell execution, no credential theft, and no data exfiltration. All capabilities align with documented behavior.
Safe to install
This skill is safe to use. No security concerns identified.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | WRITE | WRITE | ✓ Aligned | SKILL.md declares data/ decision_log.jsonl writes; decision_eval.py:44-45 _appen… |
| Network | READ | READ | ✓ Aligned | AkShare data fetching - stock_zt_pool_em, stock_zh_a_hist, etc. in market_data.p… |
| Shell | NONE | NONE | — | No subprocess or shell execution found |
| Environment | NONE | READ | ✓ Aligned | debug_utils.py:16 reads SHORT_DECISION_DEBUG env; settings.py:40 reads SHORT_DEC… |
| Skill Invoke | NONE | NONE | — | No skill invocation capabilities used |
| Clipboard | NONE | NONE | — | No clipboard access found |
| Browser | NONE | NONE | — | No browser automation found |
| Database | NONE | NONE | — | No database access; only JSONL file logging |
File Tree
18 files · 68.5 KB · 2111 lines Python 12f · 1572L
Markdown 3f · 448L
JSON 2f · 74L
YAML 1f · 17L
├─
▾
prompts
│ └─
__init__.py
Python
├─
▾
tools
│ ├─
__init__.py
Python
│ ├─
debug_utils.py
Python
│ ├─
decision_eval.py
Python
│ ├─
fusion_engine.py
Python
│ ├─
indicators.py
Python
│ ├─
market_data.py
Python
│ ├─
money_flow.py
Python
│ ├─
reporting.py
Python
│ ├─
risk_control.py
Python
│ └─
settings.py
Python
├─
_meta.json
JSON
├─
config.json
⚠
JSON
├─
main.py
Python
├─
README.md
Markdown
├─
requirements.md
Markdown
├─
scheduler.yaml
YAML
└─
SKILL.md
Markdown
Dependencies 2 items
| Package | Version | Source | Known Vulns | Notes |
|---|---|---|---|---|
akshare | * | pip | No | Chinese financial data library; version not pinned |
pandas | * | pip | No | Standard data analysis library; version not pinned |
Security Positives
✓ Clean Python codebase with no shell execution capabilities
✓ No credential theft - does not access ~/.ssh, .env, or similar sensitive paths
✓ No data exfiltration - all network calls are read-only via AkShare for financial data
✓ No obfuscation or encoded payloads detected
✓ All filesystem writes are declared and necessary (data/decision_log.jsonl for prediction logging)
✓ Dependencies (akshare, pandas) are standard financial data analysis libraries
✓ Environment variable access is limited to debug flags only
✓ Code is well-structured with proper error handling