ClawHub
Back to skill

Security audit

tushare

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Tushare financial-data helper that uses a Tushare token and network access for market research workflows, with no evidence of hidden execution, exfiltration, or persistence.

Install only if you are comfortable giving the agent access to your Tushare token and allowing it to make network calls to Tushare. Review large exports or cache locations before running broad data pulls, and give explicit instructions before any workflow that writes local CSV/parquet files or uses account-related Tushare endpoints.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (241)

Tp4

High
Category
MCP Tool Poisoning
Confidence
95% confidence
Finding

The declared description presents a general-purpose Chinese-language Tushare research skill with broad market coverage and workflow capabilities such as transforming user requests into executable data retrieval, cleaning, comparison, screening, export, and brief analysis pipelines. The actual code is only a narrow demonstration script for fund data retrieval. It initializes Tushare Pro and calls three fund-related endpoints: fund_basic, fund_nav, and fund_manager. It does not contain any natural-language interface, query interpretation, workflow planning, exporting, screening, comparative analysis, or support for the many other declared domains like A-shares, indices, financial reports, valuation, capital flows, announcements, sectors, or macro data. This is a material description-behavior mismatch in primary purpose and supported capabilities.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The trigger guide uses very broad natural-language phrases such as common conversational finance requests, which can cause the skill to activate when the user did not explicitly intend to invoke this network-enabled, credential-using data workflow. In this context, overbroad activation is security-relevant because the skill may access external services with a sensitive token and perform data retrieval or file export based on ambiguous prompts.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
90% confidence
Finding

The file instructs the agent to choose an interface based on user need and then visit external online documentation to read usage details. This creates overly broad invocation behavior and effectively authorizes open-ended external navigation, increasing the attack surface for prompt injection, malicious documentation changes, or unintended tool use.

Content

No source excerpt is available for this finding.

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 7)May include surrounding context.

md
根据需求确定接口，然后访问在线链接，读取具体的使用说明，比如入参，出参等。

| 在线文档                                        | 接口名                | 标题               | 分类                 | 描述                                                                                                                                                                                                       |
|:--------------------------------------------|:-------------------|:-----------------|:-------------------|:---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| https://tushare.pro/wctapi/documents/386.md | etf_index          | ETF跟踪指数          | ETF专题              | 获取ETF基准指数列表信息                                                                                                                                                                                            |
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 9)May include surrounding context.

md
| 在线文档                                        | 接口名                | 标题               | 分类                 | 描述                                                                                                                                                                                                       |
|:--------------------------------------------|:-------------------|:-----------------|:-------------------|:---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| https://tushare.pro/wctapi/documents/386.md | etf_index          | ETF跟踪指数          | ETF专题              | 获取ETF基准指数列表信息                                                                                                                                                                                            |
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |
| https://tushare.pro/wctapi/documents/471.md | etf_sh_cons        | 每日篮子组合(沪市PCF)    | ETF专题              | 获取上交所场内所有ETF每日盘前披露的的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                        |
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 116)May include surrounding context.

md
| 在线文档                                        | 接口名                | 标题               | 分类                 | 描述                                                                                                                                                                                                       |
|:--------------------------------------------|:-------------------|:-----------------|:-------------------|:---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| https://tushare.pro/wctapi/documents/386.md | etf_index          | ETF跟踪指数          | ETF专题              | 获取ETF基准指数列表信息                                                                                                                                                                                            |
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |
| https://tushare.pro/wctapi/documents/471.md | etf_sh_cons        | 每日篮子组合(沪市PCF)    | ETF专题              | 获取上交所场内所有ETF每日盘前披露的的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                        |
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 229)May include surrounding context.

md
| 在线文档                                        | 接口名                | 标题               | 分类                 | 描述                                                                                                                                                                                                       |
|:--------------------------------------------|:-------------------|:-----------------|:-------------------|:---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| https://tushare.pro/wctapi/documents/386.md | etf_index          | ETF跟踪指数          | ETF专题              | 获取ETF基准指数列表信息                                                                                                                                                                                            |
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |
| https://tushare.pro/wctapi/documents/471.md | etf_sh_cons        | 每日篮子组合(沪市PCF)    | ETF专题              | 获取上交所场内所有ETF每日盘前披露的的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                        |
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 10)May include surrounding context.

md
| 在线文档                                        | 接口名                | 标题               | 分类                 | 描述                                                                                                                                                                                                       |
|:--------------------------------------------|:-------------------|:-----------------|:-------------------|:---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| https://tushare.pro/wctapi/documents/386.md | etf_index          | ETF跟踪指数          | ETF专题              | 获取ETF基准指数列表信息                                                                                                                                                                                            |
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |
| https://tushare.pro/wctapi/documents/471.md | etf_sh_cons        | 每日篮子组合(沪市PCF)    | ETF专题              | 获取上交所场内所有ETF每日盘前披露的的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                        |
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 11)May include surrounding context.

md
|:--------------------------------------------|:-------------------|:-----------------|:-------------------|:---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| https://tushare.pro/wctapi/documents/386.md | etf_index          | ETF跟踪指数          | ETF专题              | 获取ETF基准指数列表信息                                                                                                                                                                                            |
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |
| https://tushare.pro/wctapi/documents/471.md | etf_sh_cons        | 每日篮子组合(沪市PCF)    | ETF专题              | 获取上交所场内所有ETF每日盘前披露的的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                        |
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 199)May include surrounding context.

md
|:--------------------------------------------|:-------------------|:-----------------|:-------------------|:---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| https://tushare.pro/wctapi/documents/386.md | etf_index          | ETF跟踪指数          | ETF专题              | 获取ETF基准指数列表信息                                                                                                                                                                                            |
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |
| https://tushare.pro/wctapi/documents/471.md | etf_sh_cons        | 每日篮子组合(沪市PCF)    | ETF专题              | 获取上交所场内所有ETF每日盘前披露的的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                        |
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 12)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/386.md | etf_index          | ETF跟踪指数          | ETF专题              | 获取ETF基准指数列表信息                                                                                                                                                                                            |
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |
| https://tushare.pro/wctapi/documents/471.md | etf_sh_cons        | 每日篮子组合(沪市PCF)    | ETF专题              | 获取上交所场内所有ETF每日盘前披露的的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                        |
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60m
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 14)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/386.md | etf_index          | ETF跟踪指数          | ETF专题              | 获取ETF基准指数列表信息                                                                                                                                                                                            |
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |
| https://tushare.pro/wctapi/documents/471.md | etf_sh_cons        | 每日篮子组合(沪市PCF)    | ETF专题              | 获取上交所场内所有ETF每日盘前披露的的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                        |
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60m
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 21)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/386.md | etf_index          | ETF跟踪指数          | ETF专题              | 获取ETF基准指数列表信息                                                                                                                                                                                            |
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |
| https://tushare.pro/wctapi/documents/471.md | etf_sh_cons        | 每日篮子组合(沪市PCF)    | ETF专题              | 获取上交所场内所有ETF每日盘前披露的的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                        |
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60m
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 95)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/386.md | etf_index          | ETF跟踪指数          | ETF专题              | 获取ETF基准指数列表信息                                                                                                                                                                                            |
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |
| https://tushare.pro/wctapi/documents/471.md | etf_sh_cons        | 每日篮子组合(沪市PCF)    | ETF专题              | 获取上交所场内所有ETF每日盘前披露的的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                        |
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60m
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 13)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |
| https://tushare.pro/wctapi/documents/471.md | etf_sh_cons        | 每日篮子组合(沪市PCF)    | ETF专题              | 获取上交所场内所有ETF每日盘前披露的的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                        |
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60min                                                                                                                                                                                    |
| https://tushare.pro/wctapi/documents/408.md | etf_share_size     | ETF份额规模          | ETF专题              | 获取沪深ETF每日份额和规模数据，能体
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 15)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60min                                                                                                                                                                                    |
| https://tushare.pro/wctapi/documents/408.md | etf_share_size     | ETF份额规模          | ETF专题              | 获取沪深ETF每日份额和规模数据，能体现规模份额的变化，掌握ETF资金动向，同时提供每日净值和收盘价；数据指标是分批入库，交易所于次日早8点30左右更新上一交易日的数据；另外，涉及海外的ETF数据更新会晚一些属于正常情况。                                                                                          |
| https://tushare.pro/wctapi/documents/400.md | rt_etf_k           | ETF实时日线          | ETF专题              | 获取ETF实时日k线行情，支持按ETF代码或代码通配符一次性提取全部ETF实时日k线行情                                                                                                                                                             |
| https://tushare.pro/wctapi/documents/387.md | etf_mins           | ETF历史分钟          | ETF专题              | 获取ETF分钟数据，支持1min/5m
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 43)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60min                                                                                                                                                                                    |
| https://tushare.pro/wctapi/documents/408.md | etf_share_size     | ETF份额规模          | ETF专题              | 获取沪深ETF每日份额和规模数据，能体现规模份额的变化，掌握ETF资金动向，同时提供每日净值和收盘价；数据指标是分批入库，交易所于次日早8点30左右更新上一交易日的数据；另外，涉及海外的ETF数据更新会晚一些属于正常情况。                                                                                          |
| https://tushare.pro/wctapi/documents/400.md | rt_etf_k           | ETF实时日线          | ETF专题              | 获取ETF实时日k线行情，支持按ETF代码或代码通配符一次性提取全部ETF实时日k线行情                                                                                                                                                             |
| https://tushare.pro/wctapi/documents/387.md | etf_mins           | ETF历史分钟          | ETF专题              | 获取ETF分钟数据，支持1min/5m
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 103)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60min                                                                                                                                                                                    |
| https://tushare.pro/wctapi/documents/408.md | etf_share_size     | ETF份额规模          | ETF专题              | 获取沪深ETF每日份额和规模数据，能体现规模份额的变化，掌握ETF资金动向，同时提供每日净值和收盘价；数据指标是分批入库，交易所于次日早8点30左右更新上一交易日的数据；另外，涉及海外的ETF数据更新会晚一些属于正常情况。                                                                                          |
| https://tushare.pro/wctapi/documents/400.md | rt_etf_k           | ETF实时日线          | ETF专题              | 获取ETF实时日k线行情，支持按ETF代码或代码通配符一次性提取全部ETF实时日k线行情                                                                                                                                                             |
| https://tushare.pro/wctapi/documents/387.md | etf_mins           | ETF历史分钟          | ETF专题              | 获取ETF分钟数据，支持1min/5m
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 112)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60min                                                                                                                                                                                    |
| https://tushare.pro/wctapi/documents/408.md | etf_share_size     | ETF份额规模          | ETF专题              | 获取沪深ETF每日份额和规模数据，能体现规模份额的变化，掌握ETF资金动向，同时提供每日净值和收盘价；数据指标是分批入库，交易所于次日早8点30左右更新上一交易日的数据；另外，涉及海外的ETF数据更新会晚一些属于正常情况。                                                                                          |
| https://tushare.pro/wctapi/documents/400.md | rt_etf_k           | ETF实时日线          | ETF专题              | 获取ETF实时日k线行情，支持按ETF代码或代码通配符一次性提取全部ETF实时日k线行情                                                                                                                                                             |
| https://tushare.pro/wctapi/documents/387.md | etf_mins           | ETF历史分钟          | ETF专题              | 获取ETF分钟数据，支持1min/5m
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 160)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60min                                                                                                                                                                                    |
| https://tushare.pro/wctapi/documents/408.md | etf_share_size     | ETF份额规模          | ETF专题              | 获取沪深ETF每日份额和规模数据，能体现规模份额的变化，掌握ETF资金动向，同时提供每日净值和收盘价；数据指标是分批入库，交易所于次日早8点30左右更新上一交易日的数据；另外，涉及海外的ETF数据更新会晚一些属于正常情况。                                                                                          |
| https://tushare.pro/wctapi/documents/400.md | rt_etf_k           | ETF实时日线          | ETF专题              | 获取ETF实时日k线行情，支持按ETF代码或代码通配符一次性提取全部ETF实时日k线行情                                                                                                                                                             |
| https://tushare.pro/wctapi/documents/387.md | etf_mins           | ETF历史分钟          | ETF专题              | 获取ETF分钟数据，支持1min/5m
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 202)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60min                                                                                                                                                                                    |
| https://tushare.pro/wctapi/documents/408.md | etf_share_size     | ETF份额规模          | ETF专题              | 获取沪深ETF每日份额和规模数据，能体现规模份额的变化，掌握ETF资金动向，同时提供每日净值和收盘价；数据指标是分批入库，交易所于次日早8点30左右更新上一交易日的数据；另外，涉及海外的ETF数据更新会晚一些属于正常情况。                                                                                          |
| https://tushare.pro/wctapi/documents/400.md | rt_etf_k           | ETF实时日线          | ETF专题              | 获取ETF实时日k线行情，支持按ETF代码或代码通配符一次性提取全部ETF实时日k线行情                                                                                                                                                             |
| https://tushare.pro/wctapi/documents/387.md | etf_mins           | ETF历史分钟          | ETF专题              | 获取ETF分钟数据，支持1min/5m
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 242)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60min                                                                                                                                                                                    |
| https://tushare.pro/wctapi/documents/408.md | etf_share_size     | ETF份额规模          | ETF专题              | 获取沪深ETF每日份额和规模数据，能体现规模份额的变化，掌握ETF资金动向，同时提供每日净值和收盘价；数据指标是分批入库，交易所于次日早8点30左右更新上一交易日的数据；另外，涉及海外的ETF数据更新会晚一些属于正常情况。                                                                                          |
| https://tushare.pro/wctapi/documents/400.md | rt_etf_k           | ETF实时日线          | ETF专题              | 获取ETF实时日k线行情，支持按ETF代码或代码通配符一次性提取全部ETF实时日k线行情                                                                                                                                                             |
| https://tushare.pro/wctapi/documents/387.md | etf_mins           | ETF历史分钟          | ETF专题              | 获取ETF分钟数据，支持1min/5m
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 16)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60min                                                                                                                                                                                    |
| https://tushare.pro/wctapi/documents/408.md | etf_share_size     | ETF份额规模          | ETF专题              | 获取沪深ETF每日份额和规模数据，能体现规模份额的变化，掌握ETF资金动向，同时提供每日净值和收盘价；数据指标是分批入库，交易所于次日早8点30左右更新上一交易日的数据；另外，涉及海外的ETF数据更新会晚一些属于正常情况。                                                                                          |
| https://tushare.pro/wctapi/documents/400.md | rt_etf_k           | ETF实时日线          | ETF专题              | 获取ETF实时日k线行情，支持按ETF代码或代码通配符一次性提取全部ETF实时日k线行情                                                                                                                                                             |
| https://tushare.pro/wctapi/documents/387.md | etf_mins           | ETF历史分钟          | ETF专题              | 获取ETF分钟数据，支持1min/5min/15min/30min/60min行情，提供Python SDK和 http Restful API两种方式                                                                                                                             |
| https://tushare.pro/wctapi/documents/385.md | etf_basic          | ETF基本信息          | ETF专题              | 获取国内ETF基础信息，包括了QDII
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 17)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60min                                                                                                                                                                                    |
| https://tushare.pro/wctapi/documents/408.md | etf_share_size     | ETF份额规模          | ETF专题              | 获取沪深ETF每日份额和规模数据，能体现规模份额的变化，掌握ETF资金动向，同时提供每日净值和收盘价；数据指标是分批入库，交易所于次日早8点30左右更新上一交易日的数据；另外，涉及海外的ETF数据更新会晚一些属于正常情况。                                                                                          |
| https://tushare.pro/wctapi/documents/400.md | rt_etf_k           | ETF实时日线          | ETF专题              | 获取ETF实时日k线行情，支持按ETF代码或代码通配符一次性提取全部ETF实时日k线行情                                                                                                                                                             |
| https://tushare.pro/wctapi/documents/387.md | etf_mins           | ETF历史分钟          | ETF专题              | 获取ETF分钟数据，支持1min/5min/15min/30min/60min行情，提供Python SDK和 http Restful API两种方式                                                                                                                             |
| https://tushare.pro/wctapi/documents/385.md | etf_basic          | ETF基本信息          | ETF专题              | 获取国内ETF基础信息，包括了QDII。数据来源与沪深交易所公开披露信息。                                                                                                                                                                    |
| https://tushare.pro/wctapi/documents/199.md | fund_adj           | ETF复权因子          | ETF专题              | 获取基金复权因子，用于计算基金复权行情
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 83)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60min                                                                                                                                                                                    |
| https://tushare.pro/wctapi/documents/408.md | etf_share_size     | ETF份额规模          | ETF专题              | 获取沪深ETF每日份额和规模数据，能体现规模份额的变化，掌握ETF资金动向，同时提供每日净值和收盘价；数据指标是分批入库，交易所于次日早8点30左右更新上一交易日的数据；另外，涉及海外的ETF数据更新会晚一些属于正常情况。                                                                                          |
| https://tushare.pro/wctapi/documents/400.md | rt_etf_k           | ETF实时日线          | ETF专题              | 获取ETF实时日k线行情，支持按ETF代码或代码通配符一次性提取全部ETF实时日k线行情                                                                                                                                                             |
| https://tushare.pro/wctapi/documents/387.md | etf_mins           | ETF历史分钟          | ETF专题              | 获取ETF分钟数据，支持1min/5min/15min/30min/60min行情，提供Python SDK和 http Restful API两种方式                                                                                                                             |
| https://tushare.pro/wctapi/documents/385.md | etf_basic          | ETF基本信息          | ETF专题              | 获取国内ETF基础信息，包括了QDII。数据来源与沪深交易所公开披露信息。                                                                                                                                                                    |
| https://tushare.pro/wctapi/documents/199.md | fund_adj           | ETF复权因子          | ETF专题              | 获取基金复权因子，用于计算基金复权行情
...[truncated 25 chars]

Static analysis

No suspicious patterns detected.