a-stock-data
What this skill does
A stock data tool that aggregates A-share market data from multiple sources, providing a self-contained skill for AI coding assistants to access real-time and historical financial data.
github/simonlin1212 - Data Exfiltration - 8.6k stars
Threat analysis
Skill info
pkg:github/simonlin1212/a-stock-data@3a3149d?skill=a-stock-dataAssessments (2)
Data Exfiltration
Data Exfiltration via local-llm-review
SKILL.md
The skill contains code that sends data to external endpoints (e.g., `requests.post("https://...`) without clear safeguards or user consent.Obfuscation
Obfuscation via local-llm-review
README.md
The skill contains obfuscated or encoded strings that may be used to bypass detection or hide malicious behavior (e.g., `东财系接口（datacenter/push2/push2ex/reportapi/search/np-weblist）` and `f"date/{date}Badge
Add the Anomity scan badge for a-stock-data to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of a-stock-data? Report an issue or request a rescan.
