Akshare Stock Temp

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the dependency from PyPI or another package source adds normal third-party package supply-chain risk.

Why it was flagged

The skill requires installing an external Python package, but no install spec or version pin is provided. This is purpose-aligned for AkShare-based market data, but users should verify the package source/version.

Skill content
pip install akshare
Recommendation

Install AkShare only from a trusted package index, consider pinning a known-good version, and review dependency updates if using this skill regularly.

What this means

The mismatch may make it harder to confirm exactly which package identity or version is being installed.

Why it was flagged

The packaged _meta.json identity differs from the supplied registry listing, which names the skill as akshare-stock-temp version 1.0.0 under a different owner ID. This is a provenance/packaging inconsistency, not evidence of malicious behavior.

Skill content
"ownerId": "kn7cv6afang2nh65cp9nasa5f9823tqc", "slug": "akshare-stock", "version": "1.0.1"
Recommendation

Confirm the skill publisher and version before installation, especially if relying on it in a production or financial-analysis workflow.