jquants-cli-usage
Warn
Audited by Socket on Apr 9, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The skill’s functionality matches a market-data CLI guide, and its data flows are mostly proportionate, but it relies on a `jquants` executable whose official provenance was not established in the supplied evidence. Because that CLI is also expected to receive API credentials, the mandatory unverifiable-binary override makes this high security risk despite limited signs of overtly malicious behavior.
Confidence: 79%Severity: 82%
Audit Metadata