akshare-finance-data
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
aksharelibrary from the Python Package Index (PyPI) usingpip install akshare --upgrade. This is the standard delivery method for this open-source financial library. - [COMMAND_EXECUTION]: The documentation includes shell commands for installation and a verification step (
python -c "import akshare as ak; print(ak.__version__)") to ensure the library is correctly loaded. - [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface by ingesting untrusted financial data from external sources (Sina Finance, East Money, etc.) into the agent's context.
- Ingestion points: Data enters through various
aksharefunctions such asak.stock_zh_a_spot_em()andak.macro_china_gdp()inSKILL.md. - Boundary markers: No specific boundary markers or instructions to ignore embedded content are provided in the code examples.
- Capability inventory: The provided code samples use
pandasfor data manipulation. No high-risk capabilities like file-writing, network exfiltration of data, or subprocess execution on the fetched data are present. - Sanitization: No data sanitization or validation logic is included for the external data being processed.
Audit Metadata