Security audit

akshare-stock

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward Chinese A-share market data helper with minor reliability and localization issues, not a security concern.

Install only if you are comfortable using a Chinese-language tool that fetches public A-share market and financial data through AkShare. Treat outputs as informational, not investment advice, and expect the fund-flow CLI action may need a code fix before it works.

SkillSpector

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Intent-Code Divergence

Medium

Confidence: 96% confidence
Finding: `get_fund_flow` 的注释/命名表明其要获取个股资金流向，但实现中调用的是未定义的 `stock_individual_fund_flow(...)`，而不是前文统一使用的 `ak.` 接口。这不是简单的实现细节缺失，而是文档声明的能力与实际代码行为相矛盾：该函数按当前代码无法完成所宣称的功能。

Natural-Language Policy Violations

Low

Confidence: 96% confidence
Finding: The module description and user-facing messages are written only in Chinese, such as the install prompt at L013. This imposes a specific language on all users without any opt-in or alternative locale handling, which matches the language/locale policy concern.

Static analysis

No suspicious patterns detected.