ClawHub
Back to skill

Security audit

Tushare 期货数据

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward Tushare futures-data wrapper that needs a user-provided API token and has routine dependency hygiene risks.

Use a dedicated Tushare token and prefer providing it through TUSHARE_TOKEN or a secret manager instead of pasting it into prompts or request JSON. In controlled environments, pin dependency versions or use a lockfile before installing.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill documentation explicitly encourages passing the Tushare token in invocation parameters but does not warn that request parameters may be logged, stored in histories, or exposed to other components of the platform. In an agent/platform context, secrets supplied as normal inputs are more likely to leak through telemetry, debugging output, prompt traces, or shared transcripts, making credential compromise plausible.

Unpinned Dependencies

Low
Category
Supply Chain
Content
tushare>=1.2.89
pandas>=1.5.0
Confidence
91% confidence
Finding
The dependency is specified with a lower bound only, so installations may resolve to different versions over time. This weakens supply-chain control and can unexpectedly introduce breaking changes or newly published malicious/vulnerable releases into the environment.

Unpinned Dependencies

Low
Category
Supply Chain
Content
tushare>=1.2.89
pandas>=1.5.0
Confidence
94% confidence
Finding
The pandas dependency is not pinned to an exact version, allowing future installs to pull different releases than were originally tested. In addition to general reproducibility risk, this package has had security advisories, so leaving the version open increases the chance of resolving to an unsafe or incompatible version.

Static analysis

No suspicious patterns detected.