Scanned skills

tradermonty/claude-trading-skills downtrend-duration-analyzer

Checked the catalogued skill at downtrend-duration-analyzer.

SkillTrust corpus scan 20 September 2026 v0.10.0 via skillsh Verify on GitHub
A AI-triaged 0
A Security

A set by no findings on this axis

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

0 findings

No issues flagged by the static checks in the scanned files.

10 suppressed by AI triage
securityhigh SD-007 benign_example
scripts/analyze_downtrends.py

The script retrieves public stock data from a trusted API, which is a legitimate outbound request.

securityhigh SD-007 benign_example
scripts/analyze_downtrends.py

The second endpoint is a public API for stock screener data, used for legitimate data collection.

securityhigh SD-007 benign_example
scripts/analyze_downtrends.py

The call to requests.get() fetches publicly available data, not exfiltration of user data.

securityhigh SD-007 benign_example
scripts/analyze_downtrends.py

The URL is a public endpoint for historical price data, part of normal script functionality.

securityhigh SD-007 benign_example
scripts/analyze_downtrends.py

The legacy endpoint is also a public API for historical prices, used legitimately.

securityhigh SD-007 benign_example
scripts/analyze_downtrends.py

The request retrieves historical market data, a benign outbound network call for analysis.

securityhigh SD-007 benign_example
scripts/generate_histogram_html.py

Harmless reference to Plotly CDN in HTML template, not an executable network call.

securityhigh SD-007 benign_example
scripts/tests/test_fetch_stock_list.py

Mocking network call in test, no real outbound network call.

securityhigh SD-007 benign_example
scripts/tests/test_fetch_stock_list.py

Test patches requests.get; outbound call is simulated, no real network activity.

securityhigh SD-007 benign_example
scripts/tests/test_fetch_stock_list.py

Unit test uses mock; no actual network call.