Security audit

Akshare Stock Temp

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward China A-share market-data helper, with expected network data fetching and a few quality issues but no hidden persistence, credential access, destructive behavior, or exfiltration.

Install and run this only in a normal isolated Python environment, preferably with a pinned AkShare version if reproducibility matters. Expect it to contact external market-data services and treat outputs as research data, not investment advice; the fund-flow command may need fixing before use.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:11
Finding: Unpinned Third-Party Dependency Installation
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (9)

Tp4

High

Category: MCP Tool Poisoning
Confidence: 92% confidence
Finding: The description broadly claims an A-share analysis tool covering quotes, financial data, sector information, stock queries, market data, financial analysis, and stock screening. The supplied code only provides a limited command-line interface for quote retrieval, historical K-line retrieval, industry/concept board listing, simple stock search, and an attempted fund-flow lookup. There is no implementation for financial statement retrieval, financial analysis routines, or stock screening/selection logic. The primary domain is consistent with A-share market data via AkShare, but the declared scope materially overstates the implemented capabilities. Additionally, the skill is presented as a general tool, while the code is specifically a CLI entry point with action-based commands. The fund-flow helper also calls an undefined function name rather than ak.stock_individual_fund_flow, suggesting that capability may be broken in practice.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The script description and user-facing messages are written exclusively in Chinese, which forces a specific language experience. Under the policy, locale constraints should either be justified as region-specific or offer the user a language/locale choice.
Content: No source excerpt is available for this finding.

Intent-Code Divergence

Medium

Category: Not specified by scanner
Confidence: 90% confidence
Finding: get_fund_flow 的文档字符串表明该函数用于获取股票资金流向，但实际代码在 L054 调用的是未定义的 stock_individual_fund_flow(...)，而非前文一致使用的 ak.<func> 形式。这使得文档声明的功能与实际实现发生偏离：函数看似提供资金流向查询，实际却会因名称未定义而失败。
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 86% confidence
Finding: The manifest description and title specify the skill exclusively for 'A股' data analysis in Chinese, with no indication that users may choose another language or locale. Under the policy rule, a locale/language constraint should either be optional or explicitly justified as region-specific.
Content: No source excerpt is available for this finding.

Missing User Warnings

Low

Category: Not specified by scanner
Confidence: 82% confidence
Finding: This code file performs an external data fetch via AkShare, which results in network/HTTP activity to retrieve market data. Although the script prints returned results, it does not disclose to the user that invoking this action will contact external services or transmit request parameters.
Content: No source excerpt is available for this finding.

Missing User Warnings

Low

Category: Not specified by scanner
Confidence: 84% confidence
Finding: The historical K-line function calls AkShare to fetch remote market data, which is a network operation covered by the warning requirement for code files. The function lacks any confirmation, warning comment, or user-facing notice that this action reaches external services.
Content: No source excerpt is available for this finding.

Missing User Warnings

Low

Category: Not specified by scanner
Confidence: 81% confidence
Finding: This function invokes AkShare to obtain industry board data from an external source. There is no visible disclosure in code comments, docstrings, or CLI help indicating that running this command triggers network access.
Content: No source excerpt is available for this finding.

Missing User Warnings

Low

Category: Not specified by scanner
Confidence: 81% confidence
Finding: The concept board lookup calls AkShare to retrieve data remotely, which is a network operation. The code does not provide any user-facing warning or explanatory notice about this external request behavior.
Content: No source excerpt is available for this finding.

Missing User Warnings

Low

Category: Not specified by scanner
Confidence: 80% confidence
Finding: The search operation first retrieves quote data through AkShare, causing external network access before filtering locally. There is no warning in the code or CLI description that using search will contact external services.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.