Akshare Finance
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This skill appears to retrieve public financial market data and does not show credential use, persistence, or destructive behavior, though users should review the external Python dependency install.
This looks like a benign financial data helper for AKShare. Before installing, verify that you trust the external Python packages and remember that the market data is described as public and potentially delayed, not as guaranteed investment advice.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
65/65 vendors flagged this skill as clean.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the skill may install or use external Python packages that are not fully reviewed in these artifacts.
The skill depends on external Python packages with lower-bound version constraints. This is expected for an AKShare wrapper, but it means installation relies on package supply-chain trust rather than fully bundled code.
"requires": { "pip": ["akshare>=1.12", "pandas>=1.5"] }Install from trusted package indexes, consider pinning known-good versions, and review AKShare/pandas provenance if using this in a sensitive environment.