Security audit
Akshare Cn Market
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed Chinese market-data helper that fetches public financial data only when the user runs its commands.
Before installing, be comfortable adding the AKShare and pandas packages and allowing the commands to contact public financial data providers. Treat any market data returned by the skill as research material, not investment advice.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
VirusTotal findings are pending for this skill version.
Static analysis
No suspicious patterns detected.