ClawHub
Back to skill

Security audit

AMtkSkill

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent A-share market data tool that uses Tushare, stores fetched market data locally, and does not show hidden or unrelated behavior.

Install this if you are comfortable providing a Tushare API token, making outbound requests to Tushare, and storing downloaded market data locally. Review large fetch commands before running them because they may use API quota and disk space.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.