shioaji
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to fetch installation scripts and market data from the author's official GitHub repository (
sinotrade/rshioaji) and documentation sites. - [REMOTE_CODE_EXECUTION]: Provides setup commands involving piped remote execution (
curl | shandiex) to install binary tools from the vendor's repository for environment preparation. - [COMMAND_EXECUTION]: Utilizes local shell commands for starting the HTTP server daemon and executing trading queries via the
shioajiCLI utility. - [CREDENTIALS_UNSAFE]: Manages sensitive credentials including API keys, secret keys, and CA certificates; the skill correctly advises users to utilize environment variables and secure local storage for these items.
Audit Metadata