Futu-Stock

Name/description (access Futu data via MCP/OpenD) match the declared binaries (python3, futu-mcp-server), required env (FUTU_HOST, FUTU_PORT), included mcp-config.json, and executor.py which bridges to a local MCP server. The assets requested are appropriate for this purpose.

SKILL.md and executor.py limit activity to checking/installing Python packages, interacting with a local MCP server (via stdio), probing the OpenD TCP port, and optionally starting a local FutuOpenD executable when OPEND_PATH is set. These are within the stated scope, but the skill can launch a local OpenD binary (via OPEND_PATH) and will inherit OS environment for subprocesses — the user should ensure OPEND_PATH points to a legitimate Futu OpenD installation.

There is no packaged install spec; executor.py will call pip or pipx to install 'mcp' and 'futu-stock-mcp-server' if missing. Installing packages via pip/pipx is expected for this skill but does execute code downloaded from PyPI — verify the upstream package source if you need stronger guarantees.

The skill declares only FUTU_HOST and FUTU_PORT as required (primaryEnv FUTU_HOST), which is proportional. mcp-config.json provides additional default env entries (e.g., FUTU_ENABLE_TRADING=0). Be aware that if a user overrides env (or mcp-config.json) to enable trading, the underlying MCP server could expose trading operations — the skill could then call those tools. No unrelated third-party credentials are requested.

always is false and the skill does not modify other skills or system-wide agent settings. It can be invoked autonomously (standard default) but does not request permanent platform-wide privileges.