Security audit
Security checks for vulnerabilities and agentic risk
The skill is a small market-quote tool, but its user-facing description understates its external data sources and crypto behavior.
Install only if you are comfortable with ticker symbols being sent through a local proxy to Yahoo Finance and, for some inputs, to Binance. The publisher should document Binance crypto support and the proxy requirement or remove that path before this reads as fully scoped.
The declared purpose is a Yahoo Finance-based US stock quote tool, but the code reportedly also calls Binance for cryptocurrency prices and does not faithfully match the described outputs. This kind of description-behavior mismatch is dangerous because it hides real external data flows and functionality from users and reviewers, creating an opportunity for unexpected network access, policy bypass, or trust abuse.
The skill advertises executable behavior that uses network access, but the manifest does not declare any explicit tool scope such as permissions or allowed-tools. This weakens reviewability and policy enforcement because consumers cannot easily verify what external capabilities the skill is expected to use, increasing the chance of undeclared outbound access being abused or overlooked.
The top-level docstring describes the module as a Yahoo Finance data retrieval tool for US market data via proxy. However, the implemented get_crypto_price function uses api.binance.com, so the documentation actively misstates the data source and supported asset class for that code path.
The manifest limits the skill's purpose to '美股行情工具' and specifically says data is fetched through Yahoo Finance for US stock market quotes. This file implements a separate get_crypto_price path that calls Binance's API for cryptocurrency prices, which is outside the described stock-only Yahoo Finance scope.
The script transmits user-supplied symbols to an external third-party service (Binance) through a local proxy, but the skill description and module text present the tool as a Yahoo Finance stock quote fetcher. In an agent skill context, undisclosed external network destinations are security-relevant because they can leak user interests, requests, and operational metadata to an unexpected service, especially when routed through a proxy.
session.proxies = PROXY
session.headers.update(HEADERS)
url = f'https://api.binance.com/api/v3/ticker/price?symbol={symbol}'
r = session.get(url, timeout=10)
if r.status_code == 200:
The description and user-facing documentation are entirely in Chinese, which implies a fixed language/locale experience. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is clearly documented and justified.
The request headers hard-code Accept-Language: en-US,en;q=0.9, which imposes a specific language/locale preference. Under the policy, locale constraints should be user-selectable or clearly justified; this script provides neither.
No suspicious patterns detected.