Fund Daily Report

• Analyzed: May 15, 2026, 1:11 AM
• Findings: 1
• Version: 1.1.0
• Hash: 968d45cc7662b7b167b27dd5b477b2a95d37825e8961b15d98b39ce9770e2d76
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle contains hardcoded plaintext credentials (phone number and password) for the JoinQuant (JQData) financial data service within 'fund_daily_report.py' (jq.auth('13918681158', 'Yindb1158')). While the script's logic is consistent with its stated purpose of generating financial reports via the AKShare library, hardcoding credentials is a high-risk security vulnerability and a significant deviation from safe coding practices.