中国汽车产销分析可视化

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a straightforward dashboard skill, with the main caution that it asks users to install unpinned Python packages.

This skill looks consistent with its stated visualization purpose. Before installing, use a Python virtual environment and consider pinning dependency versions for akshare, pandas, matplotlib, and numpy.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing unpinned packages can expose the user to dependency changes or supply-chain risk if a package version later becomes unsafe.

Why it was flagged

The skill relies on manually installed, unpinned PyPI dependencies. This is purpose-aligned for a Python dashboard, but package provenance and version pinning are not controlled by the skill artifacts.

Skill content

pip install akshare pandas matplotlib numpy

Recommendation

Install dependencies in a virtual environment and consider pinning trusted package versions before use.