tushare
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the 'tushare' Python package from the well-known Tsinghua University PyPI mirror (pypi.tuna.tsinghua.edu.cn), which is a standard and trusted source in the developer community.
- [CREDENTIALS_UNSAFE]: The documentation follows secure practices for handling sensitive information. It advises users to store their API tokens in environment variables (TUSHARE_TOKEN) rather than hardcoding them, and provides a placeholder for local configuration.
- [COMMAND_EXECUTION]: The provided code examples use standard Python library calls (import tushare as ts) to fetch data from the official Tushare API. These scripts are strictly for data retrieval and do not contain arbitrary command execution or risky system calls.
- [DATA_EXFILTRATION]: While the skill performs network requests, all traffic is directed to official Tushare domains (tushare.pro) to fulfill its primary purpose as a financial data source. No evidence was found of sensitive data being sent to unauthorized third-party servers.
Audit Metadata