fund-diagnosis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill performs a runtime POST to https://ai-saas.eastmoney.com/proxy/app-robo-advisor-api/assistant/fund-analysis and directly injects the API's returned Markdown/displayData as the agent's visible reply, so external content from that URL controls the agent's output.

HIGH W008: Secret detected in skill content (API keys, tokens, passwords).

• Secret detected (high risk: 1.00). I inspected the skill files for hard-coded credentials. I found a high-entropy API key literal embedded as the default fallback for an environment variable:
• In scripts/get_data.py: EM_API_KEY = os.environ.get("EM_API_KEY", "em_fjFqd4YB6Cqs52LF48XWbMDdLNq6MyNg").strip()

This is a non-placeholder, random-looking string (high entropy) and would be usable as an API key if the environment variable is not set, so it meets the definition of a secret and should be treated as leaked.

Other values in the repository (URLs, paths, timeouts, example commands, parameter names) are not secrets and were ignored per the rules (they are either non-sensitive configuration, documentation, or environment variable names without values). No PEM/private key blocks or other high-entropy literals were found.