zettaranc-perspective
Warn
Audited by Socket on Jul 30, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS:用途大体围绕A股分析,但技能实际足迹包含凭证收集、`.env`写入、静默配置检测、未验证bridge服务,以及来源未证实的`zt` CLI。官方Tushare依赖本身合理,但把Token和用户交易数据交给未验证组件使风险显著升高。
Confidence: 84%Severity: 83%
Audit Metadata