ClawHub
Back to skill

Security audit

TuShare Stock Skill

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed Tushare stock-data helper whose token, network use, and local cache fit its stated A-share research purpose.

Install in a virtual environment, provide only the Tushare token you intend this skill to use, and set TUSHARE_STOCK_ENV_FILE only to a small file containing that token. For production or automated trading workflows, pin dependencies and treat the realtime crawler endpoints as unverified external-source data with possible compliance and reliability limits.

SkillSpector

Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (6)

Context-Inappropriate Capability

Medium
Confidence
68% confidence
Finding
The catalog includes crawler-based realtime endpoints explicitly described as scraping third-party network sources and being outside normal Tushare server guarantees. In an agent skill, surfacing such endpoints can bypass expected trust, provenance, compliance, and stability assumptions, creating risk of brittle behavior, terms-of-service violations, or consumption of unverified external data.

Unpinned Dependencies

Low
Category
Supply Chain
Content
pandas
tushare
requests
beautifulsoup4
Confidence
95% confidence
Finding
The dependency list leaves pandas unpinned, so installs may pull different versions over time, including versions with breaking changes or newly introduced vulnerabilities. In a skill that processes market data, this weakens build reproducibility and increases supply-chain risk because the executed package version is not controlled.

Unpinned Dependencies

Low
Category
Supply Chain
Content
pandas
tushare
requests
beautifulsoup4
Confidence
94% confidence
Finding
The tushare package is unpinned, which means environment rebuilds can silently change behavior or introduce vulnerable releases. Because this skill is specifically centered on Tushare-based stock-data access, the package is core to execution, so an unsafe upstream update would directly affect the skill.

Unpinned Dependencies

Low
Category
Supply Chain
Content
pandas
tushare
requests
beautifulsoup4
Confidence
97% confidence
Finding
The requests dependency is unpinned, allowing installation of arbitrary future or resolver-selected versions, including ones with known security defects. Since this skill is likely to perform outbound HTTP requests for stock and related data, a vulnerable or behavior-changing requests release could directly affect network security and data handling.

Unpinned Dependencies

Low
Category
Supply Chain
Content
pandas
tushare
requests
beautifulsoup4
Confidence
92% confidence
Finding
BeautifulSoup4 is unpinned, which creates non-reproducible builds and avoidable supply-chain exposure. While it is typically lower risk than network transport libraries, unreviewed parser changes can still affect scraping logic and security assumptions around untrusted HTML processing.

Known Vulnerable Dependency: requests — 10 advisory(ies): CVE-2014-1830 (Exposure of Sensitive Information to an Unauthorized Actor in Requests); CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi) +7 more

High
Category
Supply Chain
Confidence
89% confidence
Finding
The requirements file allows requests without a version bound, and multiple known advisories exist for older requests releases, including credential leakage and transport-security-related issues. Because this skill likely performs network access to external financial data sources, using an unbounded requests dependency materially increases the chance of pulling or retaining a vulnerable version in a network-facing component.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.