Security audit

Tushare Pro

Security checks for vulnerabilities and agentic risk

Overview

This skill appears to be a disclosed Tushare market-data helper, with the main caution being its persistent, unpinned Python dependency installation.

Install this only if you are comfortable giving the script and its Python dependencies access to your Tushare API token. Prefer installing in a virtual environment with pinned dependency versions, and review the Chinese documentation and signup URL before using it.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:12
Finding: Unpinned Third-Party Python Dependencies
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (6)

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 87% confidence
Finding: The skill requires access to the TUSHARE_TOKEN environment variable and declares install-time execution capabilities, but it does not define an explicit tool/permission scope. In agent environments, missing scope declarations can cause overbroad access or ambiguous trust boundaries, increasing the risk that the skill reads sensitive environment data beyond what users expect.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: This markdown file contains user-facing instructions solely in Chinese, while the policy requires flagging language or locale constraints that are forced without user opt-in. The file does not offer an alternative language, opt-in, or justification that the Chinese-only presentation is required for a region-specific compliance purpose.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 92% confidence
Finding: This markdown file presents all instructions and reference content exclusively in Chinese, which can amount to a language/locale policy issue when no user opt-in or alternative language option is offered. The document does not indicate that the skill is region-specific or otherwise justified to require Chinese only.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 88% confidence
Finding: This markdown file is natural-language documentation and it consistently forces a single language locale for all users. Under the policy, language restrictions should either provide user choice or be clearly documented as a justified region-specific constraint, which is not stated here.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The module description and all user-facing help/messages in this script are presented exclusively in Chinese. Under the policy, forcing a specific language without offering user choice or documenting a justified locale restriction is a natural-language policy violation.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: Argument descriptions, command help strings, and printed output throughout the CLI are all Chinese-only, with no option for another locale. This creates a language policy issue because users are required to interact in one language regardless of preference.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.