The tool makes read-only public market-data requests and writes only beneath the output directory selected by the caller. It does not require credentials, place orders, connect to a broker, execute downloaded code or transmit local documents.

Report vulnerabilities privately through the repository security-advisory interface. Do not include account credentials, private portfolio information or proprietary filings in a public issue.