a-share-paper-trading

Fail

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: HIGHPERSISTENCECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PERSISTENCE]: The skill includes a mechanism to maintain presence on the host operating system. The script scripts/paper_trading_ctl.py provides an install-launchd command that creates a persistent LaunchAgent in ~/Library/LaunchAgents/ai.openclaw.a-share-paper-trading.plist and activates it using launchctl, causing the service to run automatically on user login.\n- [COMMAND_EXECUTION]: The service management scripts (scripts/paper_trading_ctl.py and scripts/full_function_smoke_check.py) utilize subprocess.Popen to execute shell commands for starting the backend service and managing system-level service configurations via launchctl.\n- [EXTERNAL_DOWNLOADS]: The MarketDataProvider in scripts/paper_trading/market_data.py performs network requests to fetch financial data from external domains including money.finance.sina.com.cn, gtimg.cn, and akshare library endpoints.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 19, 2026, 03:22 PM
Security Audit — agent-trust-hub — a-share-paper-trading