Skills/ClawHub/yyqdata-stock-skill

yyqdata-stock-skill@3.5.31

CAUTION· install only

Publisher claims: "A股/港股/美股量化数据查询（数据 REST API，**非 OpenAI/LLM 兼容端点**；所有接口在 /openapi/v1/** 下，token 自查用 POST /openapi/v1/whoami）。把"看下宁德时代最近怎么样""龙虎榜""ML 选股""美债收益率"这类中文问题翻成 /openapi..." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher kouyusanpi · publishing for 152 daysInstalls 561Last detonated 29 h ago
What would fix thisWatchDispute verdict

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-13 and scored it 78/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: README links to an external installer; HTTP URL with a raw public IP address; HTTP URL with a raw public IP address. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
README links to an external installerREADME.md → https://static.yyqyx.com/skill/yyqdata-stock-skill.ziphttps://static.yyqyx.com/skill/yyqdata-stock-skill.zipFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File permission modification commandupdate.sh:173 · File permission modification command — agent changes file ownership/permissions[[ -w "$INSTALL_DIR" ]] || error "安装目录不可写：$INSTALL_DIR（chmod +w 或换路径）" 3Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
URL using a raw public IP addressSKILL.md:44 · URL using a raw public IP address — may bypass domain-based filteringBASE="${YYQDATA_API_BASE_URL:-http://120.220.73.199}" # base_url 只到主机，不含 /openapiFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
HTTP URL with a raw public IP addressSKILL.md:44 · HTTP URL with a raw public IP address — a hard-coded destination that domain-based monitoring cannot nameBASE="${YYQDATA_API_BASE_URL:-http://120.220.73.199}" # base_url 只到主机，不含 /openapiFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
HTTP URL with a raw public IP addressSKILL.md:113 · HTTP URL with a raw public IP address — a hard-coded destination that domain-based monitoring cannot nameBASE="${YYQDATA_API_BASE_URL:-http://120.220.73.199}"Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL using a raw public IP addressSKILL.md:55 · URL using a raw public IP address — may bypass domain-based filtering> ⚠️ **`/openapi` 是路径的一部分，不是 base_url 的一部分**——base_url 只到 `http://120.220.73.199`，调用时务必拼成 `${BASE}/openapi/v1/...`。误探无前缀路径会收到一段引导 JSON（hint 字段指回正确端点）。Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL using a raw public IP addressSKILL.md:113 · URL using a raw public IP address — may bypass domain-based filteringBASE="${YYQDATA_API_BASE_URL:-http://120.220.73.199}"Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
HTTP URL with a raw public IP addressSKILL.md:15 · HTTP URL with a raw public IP address — a hard-coded destination that domain-based monitoring cannot namedefault: "http://120.220.73.199"Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL using a raw public IP addressSKILL.md:15 · URL using a raw public IP address — may bypass domain-based filteringdefault: "http://120.220.73.199"Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
HTTP URL with a raw public IP addressSKILL.md:143 · HTTP URL with a raw public IP address — a hard-coded destination that domain-based monitoring cannot name{ "token": "stk_live_xxx", "base_url": "http://120.220.73.199" }Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
HIGH
HTTP URL with a raw public IP addressSKILL.md:55 · HTTP URL with a raw public IP address — a hard-coded destination that domain-based monitoring cannot name> ⚠️ **`/openapi` 是路径的一部分，不是 base_url 的一部分**——base_url 只到 `http://120.220.73.199`，调用时务必拼成 `${BASE}/openapi/v1/...`。误探无前缀路径会收到一段引导 JSON（hint 字段指回正确端点）。Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
URL using a raw public IP addressSKILL.md:143 · URL using a raw public IP address — may bypass domain-based filtering{ "token": "stk_live_xxx", "base_url": "http://120.220.73.199" }Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07

Cost to the agent

Instructions loaded
≈28,728 tok
1 file · 7 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

2 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim kouyusanpi: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. README links to an external installer≈ +4 on the totalPin versions and sources; vendor anything fetched at install time.
  3. HTTP URL with a raw public IP address≈ +4 on the totalReplace encoded or assembled strings with plain literals and remove undeclared network calls.
  4. File permission modification command≈ +2 on the totalRequest the narrowest permission that works; replace wildcards with the exact paths or hosts.
  5. URL using a raw public IP address≈ +2 on the totalReplace encoded or assembled strings with plain literals and remove undeclared network calls.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim kouyusanpiPropose a patch to the maintainer
yyqdata-stock-skill@3.5.31 safety verdict: Caution (install only) — KillerSkills