tushare
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard utility for financial data analysis, providing scripts to query the Tushare Pro API for market information.
- [EXTERNAL_DOWNLOADS]: The skill connects to the official Tushare API endpoint (api.tushare.pro) to retrieve financial records. This is a well-known service in the finance domain and the primary intended function of the skill.
- [CREDENTIALS_UNSAFE]: The skill correctly manages sensitive credentials by reading the Tushare API token from the TUSHARE_TOKEN environment variable rather than using hardcoded secrets.
- [COMMAND_EXECUTION]: The skill includes Python scripts designed to be executed by the agent. These scripts use standard argument parsing and pass parameters safely to the Tushare library, avoiding shell injection vulnerabilities.
Audit Metadata