Quant Stock Picker Pro

AI-powered stock screening tool for Chinese A-shares. Daily picks using multi-factor analysis (fundamentals + technical + sentiment). Use when user asks abou...

This skill appears to implement the described stock‑screening features, but there are several red flags you should consider before installing or running it: 1) The main script injects a hardcoded user path (/Users/…/workspace/scripts) into Python's import path — this can cause the skill to import arbitrary local code on your machine; 2) It clears HTTP_PROXY/HTTPS_PROXY and sets NO_PROXY='*', which can bypass proxy/monitoring setups and is unnecessary for normal operation; 3) It imports or references an anti‑scraping library (Scrapling / StealthyFetcher), indicating aggressive scraping behavior; 4) SKILL.md mentions config files and other scripts that are not present in the package (e.g., scripts/config.py, market_executor.py), suggesting the package may be incomplete or inconsistent. Recommendations: only run this in an isolated environment (sandbox / VM), inspect and remove the sys.path insertion and proxy overrides before use, avoid running pip installs from unknown sources without reviewing packages, and confirm the skill's author/origin. If you plan to use it with real accounts or sensitive network environments, do not install until these issues are resolved.

Type: OpenClaw Skill Name: quant-stock-picker-pro Version: 1.0.0 The skill bundle contains hardcoded absolute paths to a specific user's home directory ('/Users/liangjiahao/') in 'scripts/quant-stock-picker-ultimate-integrated.py', which is a significant security risk and functional flaw for a shared bundle. The main script also explicitly disables system proxies (HTTP_PROXY/HTTPS_PROXY), a technique often used to bypass network monitoring. While these appear to be unintentional developer errors or aggressive optimization rather than clear malware, the combination of hardcoded paths and network bypasses warrants a suspicious classification.