Security audit
Security checks across malware telemetry and agentic risk
This market-data skill is mostly purpose-aligned, but it automatically installs unpinned Python packages and silently bypasses proxy settings during normal use.
Review before installing in managed or sensitive environments. Prefer preinstalling reviewed, pinned versions of akshare and pandas, and be aware that the script may bypass configured proxy variables for its own process. VirusTotal and static scan were clean, and no credential theft, exfiltration, persistence, or destructive behavior was found.
import akshare # noqa: F401
except ImportError:
print("正在安装依赖 akshare pandas ...", file=sys.stderr)
subprocess.check_call(
[sys.executable, "-m", "pip", "install", "akshare", "pandas", "-q"]
)akshare>=1.14.0 pandas>=2.0.0
akshare>=1.14.0 pandas>=2.0.0
65/65 vendors flagged this skill as clean.
No suspicious patterns detected.