ths-financial-data

Warn

Audited by Socket on Aug 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS。技能目的与股票数据查询能力基本一致,但核心能力依赖自动安装的个人维护第三方库 `thsdk`,而非可明确验证的同花顺官方 SDK;同时未清晰说明官方端点与凭据流向。更像高风险第三方集成,而非确认恶意。

Confidence: 85%Severity: 66%
Audit Metadata
Analyzed At
Aug 19, 2026, 07:49 PM
Package URL
pkg:socket/skills-sh/bighardperson%2Fcomputer-science-skills-collection%2Fths-financial-data%2F@aaa010557858b802681e3b81a33d1f408815ae453e6c55fe7fdab7b3965194c6
Security Audit — socket — ths-financial-data