yanbaoke-research-report-download

从全球行业报告，券商研报，机构深度报告与图表数据聚合AI平台，覆盖5000多家机构，五百万+报告-覆盖全行业深度研究的研报客平台-pc.yanbaoke.cn，研报客app。搜索各行各业的研究报告，获取报告标题、获取报告内容，并可下载报告源文件。

This skill's code (search.mjs and download.mjs) appears to do what the description promises: search and download reports from yanbaoke's API. However, the provided installation instructions tell you to curl scripts from https://app.quzili.cn (a host different from the API domain) into your home directory and to append your API key to ~/.bashrc. Before installing, consider: 1) Verify the installer host and files (app.quzili.cn) — prefer downloading code bundled in the registry or from an official, audited release; 2) Inspect the downloaded scripts locally (search.mjs, download.mjs) before running them; 3) Avoid permanently storing sensitive API keys in ~/.bashrc on multi-user machines — use temporary environment variables or a secrets manager if possible; 4) Confirm that the API endpoints (api.yanbaoke.cn) are legitimate and that pricing/terms are acceptable; 5) If you are uncomfortable with curling remote code, copy the script contents from a vetted source or ask the publisher for a signed release. These concerns make the skill suspicious but not necessarily malicious.