Akshare Stock Temp
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the dependency from PyPI or another package source adds normal third-party package supply-chain risk.
The skill requires installing an external Python package, but no install spec or version pin is provided. This is purpose-aligned for AkShare-based market data, but users should verify the package source/version.
pip install akshare
Install AkShare only from a trusted package index, consider pinning a known-good version, and review dependency updates if using this skill regularly.
The mismatch may make it harder to confirm exactly which package identity or version is being installed.
The packaged _meta.json identity differs from the supplied registry listing, which names the skill as akshare-stock-temp version 1.0.0 under a different owner ID. This is a provenance/packaging inconsistency, not evidence of malicious behavior.
"ownerId": "kn7cv6afang2nh65cp9nasa5f9823tqc", "slug": "akshare-stock", "version": "1.0.1"
Confirm the skill publisher and version before installation, especially if relying on it in a production or financial-analysis workflow.
