akshare
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The tool relies on standard Python libraries, specifically 'akshare' and 'pandas', to perform its functions. These are well-established packages for financial data analysis.
- [DATA_EXPOSURE]: The skill performs network requests to various public financial data portals (such as Eastmoney and Sina Finance) through the 'akshare' library functions. These operations are essential for the skill's primary purpose of retrieving market data and do not target sensitive local files or credentials.
- [COMMAND_EXECUTION]: The skill uses 'argparse' to handle command-line arguments. User inputs for stock codes, dates, and query modes are processed safely and passed to library functions without using dangerous shell execution or dynamic evaluation.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests external data from financial websites and presents it to the agent context, it lacks any high-privilege 'write' or 'execute' capabilities that would allow an attacker to exploit the agent through malicious content embedded in financial reports or stock names. The data is simply formatted as markdown tables for display.
Audit Metadata