Security audit
Security checks for vulnerabilities and agentic risk
This stock-research skill is mostly purpose-related, but it exposes service credentials and gives investment-style guidance from misleading or simulated data paths.
Review before installing. The publisher should remove and rotate embedded credentials, make JQData status truthful and opt-in, replace or clearly watermark simulated market inputs, scope third-party queries to the intended HS300 workflow, and pin dependencies. Users should not run this with packaged credentials or rely on its position guidance without validating data provenance.
# 沪深300多因子投研系统依赖清单 # 数据获取 akshare>=1.8.0 tushare>=1.2.89 pywencai>=0.13.0 # 同花顺问财 — 自然语言补充查询 # jqdatasdk>=1.8.0 # 已禁用 — 免费版数据截止2026-02-10
# 数据获取 akshare>=1.8.0 tushare>=1.2.89 pywencai>=0.13.0 # 同花顺问财 — 自然语言补充查询 # jqdatasdk>=1.8.0 # 已禁用 — 免费版数据截止2026-02-10
# jqdatasdk>=1.8.0 # 已禁用 — 免费版数据截止2026-02-10 # 数据处理 pandas>=1.3.0 numpy>=1.21.0 # 技术分析
# 数据处理 pandas>=1.3.0 numpy>=1.21.0 # 技术分析 ta-lib>=0.4.24
numpy>=1.21.0 # 技术分析 ta-lib>=0.4.24 # 科学计算 scipy>=1.7.0
No suspicious patterns detected.
