社区目录预览DeepSeek Harness 仍处于开发者预览阶段
SA

stock-analysis-plugin

插件已确认插件社区发布

Weaxs/stock-analysis-plugin · 4 天前更新

安装方式

dsh plugin --profile <profile> add @weaxs/dsh-stock-analysis
dsh plugin --profile web add @weaxs/stock-analysis-plugin
dsh plugin --profile web add github:Weaxs/stock-analysis-plugin

仓库内包含的插件

  • @weaxs/dsh-stock-analysisv0.1.4✓

    DeepSeek Harness (dsh) plugin for stock analysis, screening, and strategy backtesting across A/HK/US/JP/KR/TW markets

    package.json
    dsh/package.json
    dsh.bundle.patch
    dsh/cordis.patch.yml
    官方核心包 (3)
    • @deepseek-ai/cordis^4.0.1共享
    • @deepseek-ai/dsh-skill^0.0.1-rc.1共享
    • @deepseek-ai/dsh-tools^0.0.1-rc.1共享
  • @weaxs/stock-analysis-pluginv0.1.4

    Pi Agent extension for stock analysis, screening, and strategy backtesting across A/HK/US markets

    package.json
    package.json
    dsh.bundle.patch
    —

路径固定于提交 421b62cc046a

概览

Stock analysis extension for Pi Agent — lightweight market data tools + strategy skills

仓库检查结果

结果绑定到所列 commit,仅涵盖本站实际执行的静态检查。证据分衡量可复核信息的完整度,不是兼容性百分比,也不构成安全保证。

仓库静态检查

高风险
检查 Commit
421b62cc046a
证据分
68/100
静态风险
高风险
扫描文件
5
检查发现
6

证据分项

来源溯源20/25
安装文档25/25
维护状况17/20
兼容性证据6/20
安全信号0/10

兼容性置信度: 未知

安装期脚本 (3)
  • postinstallnode scripts/setup-python.mjs
  • dsh/package.json#postinstallnode scripts/setup-python.mjs
  • openclaw/package.json#postinstallnode scripts/setup-python.mjs
检查发现 (6)
  • 高install.script
    dsh/package.jsoninstall-time
    "postinstall": "node scripts/setup-python.mjs"
  • 高install.script
    openclaw/package.jsoninstall-time
    "postinstall": "node scripts/setup-python.mjs"
  • 高install.script
    package.jsoninstall-time
    "postinstall": "node scripts/setup-python.mjs"
  • 中obfuscation.child-process
    scripts/setup-python.mjs:2obfuscation
    import { execSync } from "node:child_process";
  • 中obfuscation.child-process
    scripts/setup-python.mjs:18obfuscation
    execSync(cmd, { stdio: "pipe", timeout: 300_000 });
  • 中obfuscation.child-process
    scripts/setup-python.mjs:24obfuscation
    const ver = execSync(`${name} --version`, { stdio: "pipe" }).toString().trim();
未执行的检查
  • 依赖漏洞数据库扫描
  • 实际安装测试
  • 运行时行为验证

扫描器 1.0.0 · 评分器 1.0.0