stock-portfolio-advisor@2.4.0
CAUTION· static onlyPublisher claims: "分析A股自选与持仓，获取行情、财报、风险与新闻，按行业计算价值评分和独立交易环境分，输出基本面情景估值、数据缺口及受用户风险政策约束的配置参考，并生成离线HTML报告。适用于股票诊断、持仓复盘、投资价值评分和组合配置请求；不自动下单。 English — Deterministic value scoring and allocation for China A-share watchlists and holdings; sector-routed scoring, separate trading-environment score, scenario-based fundamental valuation, explicit data-gap reporting and constrained allocation reference; renders an offline HTML report. Pure Python stdlib, 77 unit tests. Not investment advice." Observed in sandbox: static analysis only — behavior not yet observed.
Coverage
Static only; nothing was run yet.The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.
Is [email protected] safe to install?
KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-07 and scored it 59/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Latin word with Cyrillic or Greek look-alike letters (homoglyph). Summary: static analysis only — behavior not yet observed.
Behavior trace
Queued for honeypot run · static analysis onlyThis version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.
Static findings
npx -y [email protected] kline sh600519,sz000725 --period day --limit 1Fix: Pin versions and sources; vendor anything fetched at install time.主通道为已连接的westock-mcp，以及 `npx -y [email protected]`。先检查实际可用能力；服务字段、披露频率与数据覆盖需验证，不能把供应商缺项理解为零。Fix: Pin versions and sources; vendor anything fetched at install time.ΣCFFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct."""评分CLI：python score_engine.py --input metrics.json --output result.json [--prev old.json]"""Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.python scripts/build_report.py --result result.json --output workspace/portfolio_ledger/report.htmlFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.python build_report.py --result result.json --output report.html --css ../assets/report.cssFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.npx -y [email protected] finance sh600519,sz000725 --num 8Fix: Pin versions and sources; vendor anything fetched at install time.python scripts/score_engine.py --input metrics.json --output result.jsonFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.npx -y [email protected] risk sh600519,sz000725Fix: Pin versions and sources; vendor anything fetched at install time.npx -y [email protected] kline sh600519,sz000725 --period day --limit 250Fix: Pin versions and sources; vendor anything fetched at install time.python build_report.py --result result.json --output report.htmlFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.
What would make this Verified
21 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%- Unclaimed publisher≈ +8 on the totalClaim holauv: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
- Hidden instructions≈ +6 on the totalRemove HTML comments, zero-width characters and white-on-white text that carry instructions. Everything the agent is meant to read should be visible to the person reading the file.
- npx invocation of non-well-known package≈ +2 on the totalPin versions and sources; vendor anything fetched at install time.
- File type combined with upload action≈ +2 on the totalRemove the call, or declare the host in frontmatter and explain in the README what is sent and why.