ClawHub
Back to skill

Security audit

Tushare A股数据

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Tushare stock-data wrapper that uses a user-provided Tushare token for expected API calls and shows no hidden persistence or unrelated data access.

Install this only if you intend to query Tushare stock data and are comfortable providing your own Tushare token. Prefer setting TUSHARE_TOKEN through a protected environment or secret store instead of pasting the token into request JSON, and rotate the token if it is exposed in logs or chat history.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The README explicitly encourages users to pass the Tushare token as a JSON call parameter on every invocation. Supplying credentials in request parameters increases the chance of exposure through logs, chat transcripts, telemetry, screenshots, debugging output, or agent memory, especially in an LLM/agent environment where inputs may be persisted or echoed back.

Missing User Warnings

Low
Confidence
87% confidence
Finding
The documentation instructs users to provide a Tushare token via parameter or the `TUSHARE_TOKEN` environment variable, but it does not warn that this token is a sensitive secret that should not be printed, committed, or exposed in shared environments. In a skill that likely handles API failures and debugging output, omission of basic secret-handling guidance increases the chance of accidental credential leakage through logs, screenshots, shell history, or multi-user hosts.

Static analysis

No suspicious patterns detected.