a-stock-data

SUSPICIOUS. The skill’s broad network footprint mostly matches its stated purpose as a market-data aggregation toolkit, and installs come from normal package registries rather than opaque binaries. However, the disabled TLS verification, huge embedded execution surface, scraping across many unofficial endpoints, and local file/network behavior make it higher risk than a typical documentation skill.