akshare-stock
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's primary function is stock data retrieval and analysis, which is implemented using legitimate financial APIs and standard libraries.
- [EXTERNAL_DOWNLOADS]: The skill requires standard Python libraries (akshare, pandas, numpy, pyyaml) from official package registries (PyPI). These dependencies are documented in SKILL.md and are necessary for the skill's stated purpose of financial data analysis.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external financial sources. While this provides a potential surface for indirect prompt injection via untrusted API data (e.g., maliciously crafted company names or shareholder remarks), the risk is minimal given the structured nature of financial data.
- Ingestion points: Financial data fetched from AKShare APIs in scripts like
stock_analyzer.py,analyze_investment.py, andget_realtime_quote.py. - Boundary markers: None explicitly used in the script output for the agent.
- Capability inventory: Ability to write reports to local files (
-oflag) and output text to the terminal. - Sanitization: No explicit filtering of the data returned from AKShare before presenting it to the agent.
Audit Metadata