Skillget

blackdesk

skill
Guvenlik Denetimi
Basarisiz
Health Uyari
  • License — License: Apache-2.0
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 5 GitHub stars
Code Basarisiz
  • rm -rf — Recursive force deletion command in scripts/install.sh
  • rm -rf — Recursive force deletion command in scripts/validate_release_artifacts.sh
Permissions Gecti
  • Permissions — No dangerous permissions requested
Purpose
This tool is an open-source, keyboard-first terminal application designed for market research. It consolidates stock quotes, charts, news, screeners, and local AI workflows into a single desktop interface.

Security Assessment
Overall Risk: Medium. The application is a network-dependent tool that routinely makes external web requests to fetch live market data and news. It also acts as a connector for local AI models. A major security concern is the installation method; it relies on piping a remote script directly into bash (`curl ... | bash`), which can be a vector for supply-chain attacks if the hosting server is compromised. Additionally, the rule-based scan detected `rm -rf` (recursive force deletion) commands hardcoded within the project's installation and artifact validation scripts. If these commands contain errors or are maliciously altered, they could result in unintended data loss on the user's machine. No hardcoded secrets or explicitly dangerous application permissions were found.

Quality Assessment
The project is under the Apache-2.0 license and is undergoing active buildout, with repository pushes logged as recently as today. However, it suffers from extremely low community visibility. With only 5 GitHub stars, the codebase has not been broadly examined by the open-source community, making it difficult to gauge widespread trust or rely on community-tested stability. Users should expect potential breaking changes as the public release is still being finalized.

Verdict
Use with caution — while the tool is actively maintained and provides a useful research interface, the low community engagement, reliance on `curl | bash` installation, and presence of `rm -rf` in shell scripts present non-trivial risks to your local system.
SUMMARY

The open source market research terminal.

README.md

Blackdesk

Blackdesk logo

The open source market research terminal

Quotes, charts, technicals, news, fundamentals, statements, insiders, screeners, and local AI connectors in one keyboard-first desk.

Apache 2.0 license macOS, Linux, Windows Active buildout

Blackdesk quote workspace screenshot

Blackdesk is under active development. Features, workflows, install channels, and packaging may still change as the public release is finalized.

Blackdesk is a local-first, keyboard-first market research desk.
It keeps symbol research, market-wide news, screeners, and local AI workflows in one focused terminal surface instead of spreading them across generic dashboards and browser tabs.

Install

curl -fsSL https://blackdesk.ai/install | bash

Upgrade an installed binary:

blackdesk upgrade --check
blackdesk upgrade

CLI:

blackdesk -h
blackdesk --help
blackdesk ?
blackdesk -v
blackdesk --version
blackdesk upgrade --check
blackdesk upgrade

Local equivalent:

./scripts/install.sh

Optional installer overrides:

  • BLACKDESK_INSTALL_DIR="$HOME/bin"
  • BLACKDESK_VERSION=0.1.0
  • BLACKDESK_REPO=Blackdesk-ai/blackdesk

Product Surfaces

  • Quote: active symbol workflow for charts, technicals, news, statements, insiders, and AI context
  • Markets: watchlists, movers, and broad tape context before drilling into a symbol
  • News: a dedicated normalized headline wire
  • Screeners: discovery flows for finding setups and movers
  • AI: local connectors targeted with desk-aware market context
    currently Codex, Claude Code, and Opencode

The bottom status bar shows the active market-data source, AI model, and app version.
When a newer published release is available, the version segment changes to vCurrent -> vLatest.

Why Blackdesk

  • local-first workflow
  • keyboard-first interaction model
  • one desk for symbol work, market context, and AI assistance
  • explicit boundaries between quote research, news, screeners, and AI
  • replaceable provider and connector architecture behind the product surface

Market Data And Usage Notice

Blackdesk is a research tool, not a brokerage platform or execution system.

  • it is provided for research and workflow assistance only
  • it does not provide investment, legal, tax, or financial advice
  • market data may be delayed, incomplete, unavailable, or changed by upstream providers
  • always verify critical prices, filings, news, and corporate actions with authoritative sources before making trading or investment decisions

Documentation

  • user guide: docs/USER_GUIDE.md
  • keyboard shortcuts: docs/KEYBOARD_SHORTCUTS.md
  • FAQ: docs/FAQ.md
  • product distribution and release channels: docs/DISTRIBUTION.md
  • architecture overview: docs/ARCHITECTURE.md
  • release checklist: docs/PUBLISHING.md
  • contributing guide: CONTRIBUTING.md
  • security policy: SECURITY.md
  • community standards: CODE_OF_CONDUCT.md

License

This project is licensed under the Apache License 2.0.

Yorumlar (0)

Sonuc bulunamadi