Akshare Router Cn

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:16 PM UTC
• Version:
  1.0.0

Overview

This skill is a coherent Chinese market-data router that uses local helper scripts for public AKShare financial data and shows no evidence of hidden access, persistence, credential use, or destructive behavior.

Before installing, understand that the skill may run local Python scripts that depend on akshare and pandas and make network requests to public financial-data providers through AKShare. Review proposed script commands before execution and install dependencies only from trusted package sources.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 84% confidence
• Finding: The keyword map contains broad generic triggers such as terms equivalent to 'from', 'to', 'current', and 'latest', which are common in ordinary user requests and can cause incorrect intent classification or slot-filling. In a routing layer, this can misdirect requests to the wrong market-data or compute path, producing unintended data access, wrong analysis, or unreliable automated behavior.

VirusTotal

63/63 vendors flagged this skill as clean.