Is robottk/stock-daily-analysis safe?
Yes. robottk/stock-daily-analysis is safe to install. Oathe's behavioral security audit gave the stock-daily-analysis skill by robottk a trust score of 83/100 with 3 findings, none critical or high.
https://clawhub.ai/robottk/stock-daily-analysis
Is robottk/stock-daily-analysis safe to install?
This is a legitimate stock market technical analysis skill that implements standard financial indicators (MACD, RSI, moving averages) and integrates with AI services for investment analysis. The main security concern is that the setup script downloads external code from GitHub, creating potential supply chain risks.
What security issues were found in robottk/stock-daily-analysis?
Category Scores
Findings (3)
MEDIUM External Repository Code Download -25 ▶
The setup.sh script downloads and executes code from an external GitHub repository (https://github.com/ZhuLinsen/daily_stock_analysis.git). This creates a supply chain risk if the external repository is compromised or contains malicious code.
LOW External AI Service API Calls -15 ▶
The skill sends stock technical analysis data to external AI services (DeepSeek, Gemini, OpenAI) for analysis. While this is legitimate functionality, it involves sending data to third-party services.
INFO Shell Script Execution -5 ▶
The skill includes executable shell scripts (setup.sh, run.sh, update.sh) that perform system operations including git operations and Python execution.
Should I install robottk/stock-daily-analysis?
Oathe's verdict for robottk/stock-daily-analysis is SAFE with a trust score of 83/100. Recommendation: Install with caution.