ClawHub
Back to skill

Security audit

Tushare

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a legitimate Tushare finance data helper that discloses its token and network use, with no hidden execution or destructive behavior found.

Install only if you are comfortable giving the agent access to Tushare-backed financial data queries using your Tushare token. Review generated exports and caches, and require explicit confirmation before using any account-mutating Tushare endpoints such as portfolio save or delete.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (247)

Tp4

High
Category
MCP Tool Poisoning
Confidence
95% confidence
Finding

声明描述的是一个广泛的中文自然语言驱动的 Tushare 研究技能，核心能力应是把多种研究型中文请求转化为可执行的数据分析流程。实际代码只是一个基金数据获取演示脚本，固定执行少量基金 API 调用并打印结果。虽然声明提到覆盖 ETF/基金场景，因此代码与声明存在局部相关性，但其主要目的、能力范围和交互方式都显著弱于且不同于声明内容，属于明显的描述与行为不匹配。

Content

No source excerpt is available for this finding.

Undeclared Tool Scope

Medium
Category
MCP Least Privilege
Confidence
70% confidence
Finding

Without declared permissions the skill's intent is opaque and cannot be validated.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The trigger phrases are extremely broad and map common conversational finance questions directly to skill activation. In an agent environment, overbroad activation can cause unintended network calls, data retrieval, or secret-dependent execution when the user did not explicitly request this skill, increasing the chance of privacy leakage, unnecessary external requests, or wrong-tool execution.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
89% confidence
Finding

The section titled “中文自然语言优先原则” explicitly prioritizes Chinese-language interaction rather than offering a language choice. Under the stated policy, forcing a specific language or locale without opt-in is a natural-language policy violation unless clearly documented as a justified regional constraint.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The quick-rule says that if the user mentions very generic goals like '看走势' or '查财报', the skill should activate, without carve-outs or disambiguation. Such generic routing logic can hijack benign conversation and push the agent into external-data workflows unnecessarily, which is risky in multi-skill systems because it widens the surface for unintended tool use and outbound requests.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium
Category
Not specified by scanner
Confidence
98% confidence
Finding

All instructional text and interface descriptions in this skill file are presented only in Chinese, and there is no indication that the user can choose another language. That can violate a language/locale policy when a skill forces a specific language without explicit opt-in or justification.

Content

No source excerpt is available for this finding.

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 7)May include surrounding context.

md
根据需求确定接口，然后访问在线链接，读取具体的使用说明，比如入参，出参等。

| 在线文档                                        | 接口名                | 标题               | 分类                 | 描述                                                                                                                                                                                                       |
|:--------------------------------------------|:-------------------|:-----------------|:-------------------|:---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| https://tushare.pro/wctapi/documents/386.md | etf_index          | ETF跟踪指数          | ETF专题              | 获取ETF基准指数列表信息                                                                                                                                                                                            |
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 9)May include surrounding context.

md
| 在线文档                                        | 接口名                | 标题               | 分类                 | 描述                                                                                                                                                                                                       |
|:--------------------------------------------|:-------------------|:-----------------|:-------------------|:---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| https://tushare.pro/wctapi/documents/386.md | etf_index          | ETF跟踪指数          | ETF专题              | 获取ETF基准指数列表信息                                                                                                                                                                                            |
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |
| https://tushare.pro/wctapi/documents/471.md | etf_sh_cons        | 每日篮子组合(沪市PCF)    | ETF专题              | 获取上交所场内所有ETF每日盘前披露的的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                        |
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 116)May include surrounding context.

md
| 在线文档                                        | 接口名                | 标题               | 分类                 | 描述                                                                                                                                                                                                       |
|:--------------------------------------------|:-------------------|:-----------------|:-------------------|:---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| https://tushare.pro/wctapi/documents/386.md | etf_index          | ETF跟踪指数          | ETF专题              | 获取ETF基准指数列表信息                                                                                                                                                                                            |
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |
| https://tushare.pro/wctapi/documents/471.md | etf_sh_cons        | 每日篮子组合(沪市PCF)    | ETF专题              | 获取上交所场内所有ETF每日盘前披露的的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                        |
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 229)May include surrounding context.

md
| 在线文档                                        | 接口名                | 标题               | 分类                 | 描述                                                                                                                                                                                                       |
|:--------------------------------------------|:-------------------|:-----------------|:-------------------|:---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| https://tushare.pro/wctapi/documents/386.md | etf_index          | ETF跟踪指数          | ETF专题              | 获取ETF基准指数列表信息                                                                                                                                                                                            |
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |
| https://tushare.pro/wctapi/documents/471.md | etf_sh_cons        | 每日篮子组合(沪市PCF)    | ETF专题              | 获取上交所场内所有ETF每日盘前披露的的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                        |
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 10)May include surrounding context.

md
| 在线文档                                        | 接口名                | 标题               | 分类                 | 描述                                                                                                                                                                                                       |
|:--------------------------------------------|:-------------------|:-----------------|:-------------------|:---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| https://tushare.pro/wctapi/documents/386.md | etf_index          | ETF跟踪指数          | ETF专题              | 获取ETF基准指数列表信息                                                                                                                                                                                            |
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |
| https://tushare.pro/wctapi/documents/471.md | etf_sh_cons        | 每日篮子组合(沪市PCF)    | ETF专题              | 获取上交所场内所有ETF每日盘前披露的的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                        |
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 11)May include surrounding context.

md
|:--------------------------------------------|:-------------------|:-----------------|:-------------------|:---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| https://tushare.pro/wctapi/documents/386.md | etf_index          | ETF跟踪指数          | ETF专题              | 获取ETF基准指数列表信息                                                                                                                                                                                            |
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |
| https://tushare.pro/wctapi/documents/471.md | etf_sh_cons        | 每日篮子组合(沪市PCF)    | ETF专题              | 获取上交所场内所有ETF每日盘前披露的的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                        |
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 199)May include surrounding context.

md
|:--------------------------------------------|:-------------------|:-----------------|:-------------------|:---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| https://tushare.pro/wctapi/documents/386.md | etf_index          | ETF跟踪指数          | ETF专题              | 获取ETF基准指数列表信息                                                                                                                                                                                            |
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |
| https://tushare.pro/wctapi/documents/471.md | etf_sh_cons        | 每日篮子组合(沪市PCF)    | ETF专题              | 获取上交所场内所有ETF每日盘前披露的的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                        |
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 12)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/386.md | etf_index          | ETF跟踪指数          | ETF专题              | 获取ETF基准指数列表信息                                                                                                                                                                                            |
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |
| https://tushare.pro/wctapi/documents/471.md | etf_sh_cons        | 每日篮子组合(沪市PCF)    | ETF专题              | 获取上交所场内所有ETF每日盘前披露的的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                        |
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60m
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 14)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/386.md | etf_index          | ETF跟踪指数          | ETF专题              | 获取ETF基准指数列表信息                                                                                                                                                                                            |
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |
| https://tushare.pro/wctapi/documents/471.md | etf_sh_cons        | 每日篮子组合(沪市PCF)    | ETF专题              | 获取上交所场内所有ETF每日盘前披露的的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                        |
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60m
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 21)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/386.md | etf_index          | ETF跟踪指数          | ETF专题              | 获取ETF基准指数列表信息                                                                                                                                                                                            |
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |
| https://tushare.pro/wctapi/documents/471.md | etf_sh_cons        | 每日篮子组合(沪市PCF)    | ETF专题              | 获取上交所场内所有ETF每日盘前披露的的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                        |
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60m
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 95)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/386.md | etf_index          | ETF跟踪指数          | ETF专题              | 获取ETF基准指数列表信息                                                                                                                                                                                            |
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |
| https://tushare.pro/wctapi/documents/471.md | etf_sh_cons        | 每日篮子组合(沪市PCF)    | ETF专题              | 获取上交所场内所有ETF每日盘前披露的的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                        |
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60m
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 13)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/472.md | etf_sz_cons        | 每日篮子组合(深市PCF)    | ETF专题              | 获取深交所场内所有ETF每日盘前披露的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                         |
| https://tushare.pro/wctapi/documents/471.md | etf_sh_cons        | 每日篮子组合(沪市PCF)    | ETF专题              | 获取上交所场内所有ETF每日盘前披露的的一篮子组合信息,包括成分股票数量、申赎现金折溢价比例等数据                                                                                                                                                        |
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60min                                                                                                                                                                                    |
| https://tushare.pro/wctapi/documents/408.md | etf_share_size     | ETF份额规模          | ETF专题              | 获取沪深ETF每日份额和规模数据，能体
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 15)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60min                                                                                                                                                                                    |
| https://tushare.pro/wctapi/documents/408.md | etf_share_size     | ETF份额规模          | ETF专题              | 获取沪深ETF每日份额和规模数据，能体现规模份额的变化，掌握ETF资金动向，同时提供每日净值和收盘价；数据指标是分批入库，交易所于次日早8点30左右更新上一交易日的数据；另外，涉及海外的ETF数据更新会晚一些属于正常情况。                                                                                          |
| https://tushare.pro/wctapi/documents/400.md | rt_etf_k           | ETF实时日线          | ETF专题              | 获取ETF实时日k线行情，支持按ETF代码或代码通配符一次性提取全部ETF实时日k线行情                                                                                                                                                             |
| https://tushare.pro/wctapi/documents/387.md | etf_mins           | ETF历史分钟          | ETF专题              | 获取ETF分钟数据，支持1min/5m
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 43)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60min                                                                                                                                                                                    |
| https://tushare.pro/wctapi/documents/408.md | etf_share_size     | ETF份额规模          | ETF专题              | 获取沪深ETF每日份额和规模数据，能体现规模份额的变化，掌握ETF资金动向，同时提供每日净值和收盘价；数据指标是分批入库，交易所于次日早8点30左右更新上一交易日的数据；另外，涉及海外的ETF数据更新会晚一些属于正常情况。                                                                                          |
| https://tushare.pro/wctapi/documents/400.md | rt_etf_k           | ETF实时日线          | ETF专题              | 获取ETF实时日k线行情，支持按ETF代码或代码通配符一次性提取全部ETF实时日k线行情                                                                                                                                                             |
| https://tushare.pro/wctapi/documents/387.md | etf_mins           | ETF历史分钟          | ETF专题              | 获取ETF分钟数据，支持1min/5m
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 103)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60min                                                                                                                                                                                    |
| https://tushare.pro/wctapi/documents/408.md | etf_share_size     | ETF份额规模          | ETF专题              | 获取沪深ETF每日份额和规模数据，能体现规模份额的变化，掌握ETF资金动向，同时提供每日净值和收盘价；数据指标是分批入库，交易所于次日早8点30左右更新上一交易日的数据；另外，涉及海外的ETF数据更新会晚一些属于正常情况。                                                                                          |
| https://tushare.pro/wctapi/documents/400.md | rt_etf_k           | ETF实时日线          | ETF专题              | 获取ETF实时日k线行情，支持按ETF代码或代码通配符一次性提取全部ETF实时日k线行情                                                                                                                                                             |
| https://tushare.pro/wctapi/documents/387.md | etf_mins           | ETF历史分钟          | ETF专题              | 获取ETF分钟数据，支持1min/5m
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 112)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60min                                                                                                                                                                                    |
| https://tushare.pro/wctapi/documents/408.md | etf_share_size     | ETF份额规模          | ETF专题              | 获取沪深ETF每日份额和规模数据，能体现规模份额的变化，掌握ETF资金动向，同时提供每日净值和收盘价；数据指标是分批入库，交易所于次日早8点30左右更新上一交易日的数据；另外，涉及海外的ETF数据更新会晚一些属于正常情况。                                                                                          |
| https://tushare.pro/wctapi/documents/400.md | rt_etf_k           | ETF实时日线          | ETF专题              | 获取ETF实时日k线行情，支持按ETF代码或代码通配符一次性提取全部ETF实时日k线行情                                                                                                                                                             |
| https://tushare.pro/wctapi/documents/387.md | etf_mins           | ETF历史分钟          | ETF专题              | 获取ETF分钟数据，支持1min/5m
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 160)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60min                                                                                                                                                                                    |
| https://tushare.pro/wctapi/documents/408.md | etf_share_size     | ETF份额规模          | ETF专题              | 获取沪深ETF每日份额和规模数据，能体现规模份额的变化，掌握ETF资金动向，同时提供每日净值和收盘价；数据指标是分批入库，交易所于次日早8点30左右更新上一交易日的数据；另外，涉及海外的ETF数据更新会晚一些属于正常情况。                                                                                          |
| https://tushare.pro/wctapi/documents/400.md | rt_etf_k           | ETF实时日线          | ETF专题              | 获取ETF实时日k线行情，支持按ETF代码或代码通配符一次性提取全部ETF实时日k线行情                                                                                                                                                             |
| https://tushare.pro/wctapi/documents/387.md | etf_mins           | ETF历史分钟          | ETF专题              | 获取ETF分钟数据，支持1min/5m
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 202)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60min                                                                                                                                                                                    |
| https://tushare.pro/wctapi/documents/408.md | etf_share_size     | ETF份额规模          | ETF专题              | 获取沪深ETF每日份额和规模数据，能体现规模份额的变化，掌握ETF资金动向，同时提供每日净值和收盘价；数据指标是分批入库，交易所于次日早8点30左右更新上一交易日的数据；另外，涉及海外的ETF数据更新会晚一些属于正常情况。                                                                                          |
| https://tushare.pro/wctapi/documents/400.md | rt_etf_k           | ETF实时日线          | ETF专题              | 获取ETF实时日k线行情，支持按ETF代码或代码通配符一次性提取全部ETF实时日k线行情                                                                                                                                                             |
| https://tushare.pro/wctapi/documents/387.md | etf_mins           | ETF历史分钟          | ETF专题              | 获取ETF分钟数据，支持1min/5m
...[truncated 25 chars]

Whitespace Padding

Medium
Category
Prompt Injection
Confidence
70% confidence
Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · references/数据接口.md (reported line 242)May include surrounding context.

md
| https://tushare.pro/wctapi/documents/470.md | rt_etf_min_daily   | ETF实时分钟-日累计      | ETF专题              | 获取ETF实时分钟数据日累计，包括1~60min                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/460.md | idx_anns           | 指数公司公告           | ETF专题              | 获取指数公司披露的相关公告信息，包括中证指数、国证指数、恒生指数和华证指数的及时与历史公告信息，跟踪指数最新信息和发展方向。                                                                                                                                           |
| https://tushare.pro/wctapi/documents/454.md | rt_etf_sz_iopv     | ETF实时参考          | ETF专题              | ETF实时净值和申购赎回数据参考，目前只提供深市                                                                                                                                                                                 |
| https://tushare.pro/wctapi/documents/416.md | rt_etf_min         | ETF实时分钟          | ETF专题              | 获取ETF实时分钟数据，包括1~60min                                                                                                                                                                                    |
| https://tushare.pro/wctapi/documents/408.md | etf_share_size     | ETF份额规模          | ETF专题              | 获取沪深ETF每日份额和规模数据，能体现规模份额的变化，掌握ETF资金动向，同时提供每日净值和收盘价；数据指标是分批入库，交易所于次日早8点30左右更新上一交易日的数据；另外，涉及海外的ETF数据更新会晚一些属于正常情况。                                                                                          |
| https://tushare.pro/wctapi/documents/400.md | rt_etf_k           | ETF实时日线          | ETF专题              | 获取ETF实时日k线行情，支持按ETF代码或代码通配符一次性提取全部ETF实时日k线行情                                                                                                                                                             |
| https://tushare.pro/wctapi/documents/387.md | etf_mins           | ETF历史分钟          | ETF专题              | 获取ETF分钟数据，支持1min/5m
...[truncated 25 chars]

Static analysis

No suspicious patterns detected.