wind-mcp-skill
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates communication with official Wind Information backend services (e.g., mcp.wind.com.cn) to provide financial data such as stock quotes, news, and economic indicators.
- [SAFE]: API key management is implemented using standard practices, allowing users to store credentials in local configuration files (
~/.wind-aimarket/configorconfig.json) with appropriate file permissions (0o600). - [SAFE]: A dedicated script (
scripts/update-check.mjs) provides an update notification system. It identifies the installation source (GitHub or Gitee) and checks for newer versions by querying official platform APIs. This process is designed to be non-blocking and silent. - [SAFE]: No malicious obfuscation, privilege escalation, or unauthorized data collection patterns were detected. The skill's filesystem and network access are strictly aligned with its documented functionality.
Audit Metadata