zettaranc-perspective

Warn

Audited by Socket on Jul 30, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS:用途大体围绕A股分析,但技能实际足迹包含凭证收集、`.env`写入、静默配置检测、未验证bridge服务,以及来源未证实的`zt` CLI。官方Tushare依赖本身合理,但把Token和用户交易数据交给未验证组件使风险显著升高。

Confidence: 84%Severity: 83%
Audit Metadata
Analyzed At
Jul 30, 2026, 01:18 PM
Package URL
pkg:socket/skills-sh/lululu811%2Fzettaranc-skill%2Fzettaranc-perspective%2F@61347454b7a5ea5856b019b089f8e7ef41d3bd85
Security Audit — socket — zettaranc-perspective