xueqiu-upload
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides example scripts that use
subprocess.run(Python), PowerShell, and Bash to execute thesaucommand-line utility. - Evidence: Found in
scripts/examples/xueqiu_cli_template.py,scripts/examples/xueqiu_commands.ps1, andscripts/examples/xueqiu_commands.sh. These are documented as static templates for the user to copy and modify, rather than code that executes automatically with untrusted input. - [CREDENTIALS_SAFE]: The documentation explicitly instructs users not to include account passwords in commands or source code, recommending the use of session files generated during an interactive login process.
- Evidence:
SKILL.mdstates: "不要把账号密码写进命令或源码" (Do not write account passwords into commands or source code).
Audit Metadata