akshare
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
aksharePython package from the official registry. - [PROMPT_INJECTION]: The skill fetches data from external financial data providers, creating a surface for indirect prompt injection if the retrieved content contains malicious instructions.
- Ingestion points: Data is retrieved via
aksharefunction calls (e.g.,stock_zh_a_hist,stock_us_hist) described inSKILL.md. - Boundary markers: None identified; the skill does not provide instructions or delimiters to isolate or ignore potential instructions embedded within the fetched data.
- Capability inventory: The skill uses Python execution capabilities to process and transform the retrieved financial data.
- Sanitization: No explicit sanitization, validation, or filtering of the external data is mentioned in the skill instructions.
Audit Metadata