Skills/ClawHub/tushare-daily-market-sense

tushare-daily-market-sense@2.0.3

VERIFIED· install only

Publisher claims: "基于 Tushare Pro A 股 daily 日线数据生成盘后市场研报的方法论 skill。当用户要求做每日盘面趋势、上证/创业板指数趋势、情绪指数趋势、赚钱效应与上涨主线分析、爆量下跌识别、容量上涨/科创板月线突破/10:30前涨停等特征分组分析、历史某日复盘、基于 daily/daily_basic/涨跌..." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher chinfi-codex · publishing for 167 daysInstalls 1,106Last detonated 3 h ago
$clawhub install tushare-daily-market-sense
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-14 and scored it 81/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
URL with embedded credentialsscripts/_shared/html_report/builder.py:36 · URL with embedded credentials — may be phishing or credential leaking' <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700'Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST07
MEDIUM
File type combined with upload actionSKILL.md:28 · File type combined with upload action — agent may exfiltrate local data files4. 聚合成稿：主 agent 读取 6 段输出、`assembled_checks.json` 与 `reference/methodology/output_discipline.md`，补一句话盘面判断、风险传导提示和最终语气校准。默认不做外部收评校验、不搜索第三方行情综述、不在报告中加入“外部校验参考”；只有用户明确要求时才补充外部来源。Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
HIGH
Access to sensitive file pathsscripts/market_panel.py:120 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_path = os.path.join(os.getcwd(), ".env")Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File type combined with upload actionscripts/render_report_html.py:38 · File type combined with upload action — agent may exfiltrate local data filesparser.add_argument("--evidence", default=None, help="Evidence JSON path. Defaults to sibling evidence_YYYYMMDD_utf8.json when input is report_YYYYMMDD.md.")Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
HIGH
Access to sensitive file pathsscripts/market_panel.py:138 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesraise RuntimeError("Missing TUSHARE_TOKEN. Set it in the environment or cwd/.env.")Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File type combined with upload actionscripts/market_panel.py:3778 · File type combined with upload action — agent may exfiltrate local data files"aggregation_inputs": ["assembled_checks.json", "reference/methodology/output_discipline.md"],Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
HIGH
Access to sensitive file pathsscripts/market_panel.py:115 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"""Read TUSHARE_TOKEN from the environment or cwd/.env."""Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05

Cost to the agent

Instructions loaded
≈1,718 tok
1 file · 33 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.