期货查询 - Futures Inquiry

• Outcome: Pass
• Latest audit: Sep 12, 2026 · 12:03 AM UTC
• Version: 1.0.8

Overview

This skill is a straightforward futures-market lookup tool that uses a disclosed JisuAPI key and external API calls for its stated purpose.

Install only if you are comfortable using JisuAPI for futures data. The skill needs your JISU_API_KEY and will send that key plus requested exchange, contract, and date-range parameters to JisuAPI over the network; it does not appear to modify local files, accounts, or trading data.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (5)

Tp2

High

• Category: MCP Tool Poisoning
• Confidence: 85% confidence

Finding

Mixing characters from multiple Unicode scripts in a single identifier is a common technique to create visually ambiguous tool names.

Content

No source excerpt is available for this finding.

Undeclared Tool Scope

Medium

• Category: MCP Least Privilege
• Confidence: 89% confidence

Finding

The skill declares runtime requirements that imply access to an environment variable and outbound network use, but it does not declare an explicit tool/permission scope. This creates a transparency and governance gap: a host may permit broader execution than users or reviewers expect, especially since the skill sends requests to a third-party API using a secret key.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · futures.py (reported line 16)May include surrounding context.

python

import requests


BASE_URL = "https://api.jisuapi.com/futures"

EXCHANGES = ("shfutures", "dlfutures", "zzfutures", "zgjrfutures", "gzfutures")

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 79% confidence

Finding

The skill name and invocation guidance are entirely Chinese-focused and tell the agent to use the skill when the user says Chinese phrases, but they do not state that the skill is China-market-specific or offer any language/locale choice. Under the policy, a forced language or locale without opt-in can be a natural-language policy issue unless clearly justified.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The skill documentation identifies a third-party data provider but does not clearly warn that user-supplied contract codes, market selections, and date ranges will be transmitted externally. This is a privacy/transparency issue because users may not realize their queries are leaving the local environment and being shared with JisuAPI.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.