Fund Analyzer Pro

• Analyzed: Apr 28, 2026, 1:26 AM
• Findings: 1
• Version: 2.1.3
• Hash: f02fef1d45ececc9cc6b39d81b1740fbaf2bc4d287696292f8c5a6c320022c36
• Source: palm
• External report: View on VirusTotal

Findings (1)

The bundle is a comprehensive fund analysis tool that integrates with financial APIs (Tiantian Fund and Qieman). While it contains security vulnerabilities—specifically a hardcoded API key for the Qieman service in 'qieman-mcp-query.py' and the local storage of an encryption key in 'encrypt-holdings.py'—these appear to be unintentional design flaws rather than malicious intent. The code logic is consistent with the stated purpose of financial analysis, and there is no evidence of data exfiltration, unauthorized remote execution, or malicious prompt injection.