moomoo-sim-trading

The simulated-trading purpose and API usage are coherent, and the skill discourages reading token files or using real-trading commands. The principal concern is the unverified CLI distribution path: mutable installer scripts execute locally, and the CLI handles OAuth credentials. Treat as high security risk, without concluding confirmed malware.