akshare-docs

Warn

Audited by Snyk on Mar 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill’s SKILL.md and example scripts explicitly call AKShare functions that fetch public web data (e.g., ak.stock_news_em / 东方财富, ak.stock_zh_a_spot_em / 东方财富, ak.crypto_binance_btc_usdt_spot / Binance and other exchange/finance sources), ingesting untrusted third-party content which the code then reads and uses to drive analysis and selection decisions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 26, 2026, 08:28 AM
Issues
1