China Stock Data

• Analyzed: May 15, 2026, 12:11 AM
• Findings: 1
• Version: 1.7.0
• Hash: d9fcdb5d4432cd0ef384083dc691de650dcf19e657dd7067331275477cf94dc5
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a comprehensive financial data integration tool for the Chinese A-share market, supporting multiple data sources like TDX, Tencent, and AKShare. Analysis of the Python scripts (china_stock.py, news_aggregator.py, etc.) confirms that the network activity and environment variable usage (e.g., JQ_USER, WENCAI_TOKEN) are strictly aligned with the stated purpose of fetching market data and authenticating with financial APIs. While china_stock.py contains a hardcoded Tushare token and redirects to a community mirror (tushare.xyz), these are common practices in the quantitative finance community for providing 'out-of-the-box' functionality and do not exhibit malicious intent. No evidence of data exfiltration, malicious execution, or prompt injection was found.