ClawAudit verdict
hs300-research-v5
hs300-research-v6
Chinese A-share stock research system installing Python packages and fetching market data from documented financial APIs; behavior consistent with stated quantitative research purpose.
⚠Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis — not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Permission integrity
package_install
Findings (4)
Possible hardcoded credential
SKILL.md · code · TOKEN = 'your_token
Pipe to python — executes piped content as Python code
hs300_research_system/纯Python定时任务使用说明.md · prose · downgraded · | Python
subprocess execution — runs system commands from Python
hs300_research_system/daily_scheduler.py · prose · downgraded · subprocess.run(
Python urllib.request — network access
hs300_research_system/run_analysis.py · prose · downgraded · urllib.request
Why the tier is capped
Execution sink present in raw bytes (Hard Floor: class D). Final tier capped at Caution — cannot be lifted by any downgrade, example-payload opt-in, or allowlist.
Permissions & capabilities
No declared permissions — minimal attack surface.
package_install Is this flag fair?
Thanks — recorded.