Daily Stock Analysis AI Agent
by ZhuLinsenLLM 驱动的多市场股票智能分析系统：多源行情、实时新闻、决策看板与自动推送，支持零成本定时运行。 LLM-powered multi-market stock analysis system with multi-source market data, real-time news, decision dashboard, automated notifications, and cost-free scheduled runs.
Daily Stock Analysis is an open-source ai agent by ZhuLinsen, written mainly in Python, with 67,369 GitHub stars and the MIT license. Its code was last updated Oct 31, 2026.
Scan summary: scanned Nov 5, 2026 at commit a52c325. Seen able to read environment and secrets, connect to the internet. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
a52c325 · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.Secrets scanfailFlagged. This check found an issue. See the findings below.
Flagged. This check found an issue. See the findings below.Dependency audit415 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Passed. This check ran and found nothing it flags.ManifestSKILL.mdpassPassed. This check ran and found nothing it flags.
Flagged. This check found an issue. See the findings below.BuildfailFlagged. This check found an issue. See the findings below.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Network egressn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (62)
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-multipart@0.0.9: 16 known vulnerabilitiesPYSEC-2026-1851, PYSEC-2026-1852, PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038 +11 more
.github/requirements-ci.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.httpcore2@2.9.1: 2 known vulnerabilitiesPYSEC-2026-3844, PYSEC-2026-3844
.github/requirements-ci.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.httpx2@2.9.1: 10 known vulnerabilitiesPYSEC-2026-3845, PYSEC-2026-3846, PYSEC-2026-3847, PYSEC-2026-3848, PYSEC-2026-3849 +5 more
.github/requirements-ci.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.py@1.9.0: 2 known vulnerabilitiesPYSEC-2020-92, PYSEC-2020-92
.github/requirements-ci.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tqdm@4.9.0: 4 known vulnerabilitiesPYSEC-2017-74, PYSEC-2026-1976, PYSEC-2017-74, PYSEC-2026-1976
.github/requirements-ci.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@xmldom/xmldom@0.9.10: 13 known vulnerabilitiesGHSA-27p8-2357-5qqv, GHSA-3px3-54cx-rmw9, GHSA-4w3w-2rp5-g8jm, GHSA-6gmq-8vp8-gcm6, GHSA-6h8r-xr42-gp59 +8 more
apps/dsa-desktop/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.app-builder-lib@24.13.3: 1 known vulnerabilityGHSA-7g7r-gx96-252g
apps/dsa-desktop/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.14: 6 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
apps/dsa-desktop/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.1.0: 6 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
apps/dsa-desktop/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.electron@31.7.7: 45 known vulnerabilitiesGHSA-2p8c-gr87-2676, GHSA-3c8v-cfp5-9885, GHSA-3qxv-5xgr-q7w9, GHSA-4f78-qhmw-8j8m, GHSA-4p4r-m79c-wq3v +40 more
apps/dsa-desktop/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.extract-zip@2.0.1: 2 known vulnerabilitiesGHSA-7pqw-9j4j-h8q3, GHSA-jmr9-qjv8-65gv
apps/dsa-desktop/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.form-data@4.0.5: 2 known vulnerabilitiesGHSA-hmw2-7cc7-3qxx, GHSA-hmw2-7cc7-3qxx
apps/dsa-desktop/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.3.1: 1 known vulnerabilityGHSA-2883-xcg3-v3hh
apps/dsa-desktop/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tmp@0.2.5: 1 known vulnerabilityGHSA-ph9p-34f9-6g65
apps/dsa-desktop/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.axios@1.18.0: 12 known vulnerabilitiesGHSA-3pq3-5fj3-cg6v, GHSA-44g4-m2mj-wpvx, GHSA-4hqw-qxg8-jxx2, GHSA-542g-h47m-68v8, GHSA-9fr6-4gfg-395g +7 more
apps/dsa-web/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.12: 7 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
apps/dsa-web/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.0.2: 7 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
apps/dsa-web/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.28.1: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
apps/dsa-web/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.flatted@3.3.3: 2 known vulnerabilitiesGHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
apps/dsa-web/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.follow-redirects@1.16.0: 3 known vulnerabilitiesGHSA-8r9p-f939-6h3c, GHSA-mrwp-f3q8-3g9p, GHSA-q3jh-wrc6-jgq8
apps/dsa-web/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.1.1: 4 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
apps/dsa-web/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@3.1.2: 3 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
apps/dsa-web/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@9.0.5: 4 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
apps/dsa-web/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.11: 3 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
apps/dsa-web/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@4.0.3: 2 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
apps/dsa-web/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.6: 4 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
apps/dsa-web/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.react-router@7.13.0: 12 known vulnerabilitiesGHSA-2j2x-hqr9-3h42, GHSA-337j-9hxr-rhxg, GHSA-49rj-9fvp-4h2h, GHSA-84g9-w2xq-vcv6, GHSA-8646-j5j9-6r62 +7 more
apps/dsa-web/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rollup@4.57.1: 1 known vulnerabilityGHSA-mw96-cpmx-2vgc
apps/dsa-web/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 1 known vulnerabilityGHSA-68fv-2mgg-jv7q
apps/dsa-web/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@7.24.3: 29 known vulnerabilitiesGHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-35p6-xmwp-9g52, GHSA-3xpg-4rpp-hhhm +24 more
apps/dsa-web/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@7.3.1: 10 known vulnerabilitiesGHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff +5 more
apps/dsa-web/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.3.6: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
apps/dsa-web/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Install or build failed in a clean environmenterror: Failed to parse metadata from built wheel cause: Metadata field Name not found
- lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
apps/dsa-web/src/components/settings/__tests__/SettingsPanelErrorBoundary.test.tsx:47 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
tests/test_anspire_search.py:139 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
tests/test_image_stock_extractor_litellm.py:42 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
tests/test_decision_signal_service.py:1076 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key3 matches in this file
tests/test_agent_tool_surface.py:599 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key2 matches in this file
tests/test_local_cli_backend.py:1647 - lowLow. Minor, or common in normal tools. Shown for information.pynacl@1.5.0: 2 known vulnerabilitiesPYSEC-2026-3002, PYSEC-2026-3002
.github/requirements-ci.txt - lowLow. Minor, or common in normal tools. Shown for information.glob@10.5.0: 1 known vulnerabilityGHSA-3g3m-2fjr-6pw4
apps/dsa-desktop/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.minimatch@9.0.9: 1 known vulnerabilityGHSA-g3hv-75wg-m249
apps/dsa-desktop/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@babel/core@7.29.0: 1 known vulnerabilityGHSA-4x5r-pxfx-6jf8
apps/dsa-web/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@humanfs/node@0.16.7: 1 known vulnerabilityGHSA-p498-v437-472g
apps/dsa-web/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@vitest/mocker@4.1.0: 2 known vulnerabilitiesGHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8
apps/dsa-web/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.ajv@6.12.6: 1 known vulnerabilityGHSA-2g4f-4pwh-qvx6
apps/dsa-web/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.baseline-browser-mapping@2.9.19: 1 known vulnerabilityGHSA-w5vr-8v7q-w6rv
apps/dsa-web/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.vitest@4.1.0: 1 known vulnerabilityGHSA-82fw-gwwq-j7x9
apps/dsa-web/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.Reads environment variables not listed in the manifestGITHUB_EVENT_PATH, PR_NUMBER, GITHUB_API_URL, GITHUB_TOKEN, GITHUB_REPOSITORY, AI_REVIEW_SOURCE, GITHUB_BASE_REF, CI_AUTO_CHECK_RESULT, CI_SYNTAX_OK, CI_HAS_PY_CHANGES, CI_DELEGATED_TO_PULL_REQUEST, GEMINI_API_KEY, GEMINI_MODEL, GEMINI_MODEL_FALLBACK, OPENAI_API_KEY
Network activity
During install
files.pythonhosted.orgpypi.org
While running
Not run — the code wasn't started in this scan
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Daily Stock Analysis alternatives
View more →Similar ai agents in Finance & Trading, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Daily Stock Analysis (this page) ZhuLinsen | 67k | MIT | Oct 31, 2026 | Scanned, no flagged issues |
| Vibe Trading HKUDS | 37k | MIT | Oct 30, 2026 | Scanned, no flagged issues |
| FinceptTerminal Fincept-Corporation | 33k | None found | Oct 26, 2026 | Not scanned yet |
| A Stock Data simonlin1212 | 11k | Apache-2.0 | Oct 30, 2026 | Scanned, no flagged issues |
| Bindu GetBindu | 10k | None found | Sep 6, 2026 | Not scanned yet |
| Tick Stock Panel shy3130 | 6.7k | MIT | Nov 1, 2026 | Scanned, no flagged issues |