T09 · Insecure Skill Coding Practices
Warning
- Location
json/config_example.json:2- Finding
Reusable Brokerage Credentials Stored in a Plaintext Configuration File
- Content
View full analysis
str: """获取交易密码""" config = self.get_futu_config() return config.get('trade_password', '') def get_trade_password_md5(self) -> str: """获取交易密码MD5（32位小写）""" config = self.get_futu_config() return config.get('trade_password_md5', '') ``` `src/account_manager.py:312-324`: ```python if password_md5 is None: password_md5 = get_trade_password_md5() if password is None: password = get_trade_password() if not password and not password_md5: return { 'success': False, 'error_msg': "未配置交易密码，请在js ...[truncated 2718 chars]- Remediation
View remediation