技能 wind-mcp-skill

📦

wind-mcp-skill

Name: wind-mcp-skill
Author: Wind

內容修訂 r1 高風險 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取🔑 環境變數

存取 Wind 金融資料

金融代理需要可靠的市場、基金、債券、文件、新聞與總體經濟資料。此技能會將請求路由至 Wind MCP 工具，並傳回附來源的結果。

支援: Claude Codex Code(CC)

⚠️ 38 差

Maintain this Skill? Claim it ⚠️ 38 差

安裝前請停止並請求確認。

請審查安裝計畫，並在變更檔案前取得使用者明確同意。

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "wind-mcp-skill" from https://skillstore.io/skills/wind-information-co-ltd-wind-mcp-skill.md and its manifest at https://skillstore.io/api/skills/wind-information-co-ltd-wind-mcp-skill/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/wind-information-co-ltd-wind-mcp-skill.md 已簽名 manifest GET /api/skills/wind-information-co-ltd-wind-mcp-skill/manifest 已簽名 lockfile GET /api/skills/wind-information-co-ltd-wind-mcp-skill/lockfile

測試它

正在使用「wind-mcp-skill」。貴州茅台今天最新價

預期結果:

回應會報告最新的 Wind 價格欄位，說明是否有任何缺漏欄位，並以 Wind 作為資料來源結尾。

正在使用「wind-mcp-skill」。篩選近一年收益率超20%的股票型基金

預期結果:

符合條件基金的排名清單，包含代碼、名稱、報酬期間、規模、經理人與資料涵蓋範圍備註。

正在使用「wind-mcp-skill」。中國近10年新能源汽車產銷量

預期結果:

總體指標摘要，包含可用序列、日期範圍、單位，以及涵蓋範圍限制的備註。

安全審計

高風險

v2 • 2026/7/6 開啟版本化報告

Most static detections are false positives from documentation, template literals, regexes, and readable Chinese reference text. Confirmed risks are credential handling, authenticated Wind network calls, and a background updater that can execute package-manager commands. No prompt injection attempts were found in the reviewed files.

已掃描檔案

2,806

分析行數

複核項目

已忽略的誤報

已確認的安全問題 (5)

高

scripts/cli.mjs:508

Environment file access

const envKey = process.env.WIND_API_KEY?.trim();

The line reads WIND_API_KEY from the process environment. It is not an environment file read, but it is sensitive secret access.

高

scripts/update-check.mjs:85

Environment file access

const roots = [projectRoot(), process.cwd(), process.env.INIT_CWD];

This is not an environment file read, but environment-controlled paths influence lock-file search. Kept as a low-confidence updater risk.

高

scripts/update-check.mjs:101

Environment file access

const xdg = process.env.XDG_STATE_HOME;

This is not an environment file read, but environment-controlled paths influence lock-file search. Kept as a low-confidence updater risk.

高

scripts/update-check.mjs:175

Environment file access

...process.env

The updater forwards the full process environment to child commands. This can expose sensitive environment values to git or npx execution.

高

README.md:75-78 scripts/cli.mjs:124-135 scripts/update-check.mjs:397-402 scripts/update-check.mjs:428-464

Automatic Background Update Executes Package Manager

The CLI starts a detached updater after successful data calls. The updater can run npx skills update or add commands and change installed skill files without per-run user confirmation.

The README documents daily automatic updates, and the code spawns update-check before running npx update or add commands. This is a behavior-level supply-chain risk.

能力複核項目 (37)

這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。

高

scripts/cli.mjs:7

Node.js child_process module

import { spawn } from 'node:child_process';

The CLI imports child_process and uses spawn for local updater and browser commands. No direct user-controlled shell was found, but command execution is real.

高

scripts/cli.mjs:133

Process spawn

const child = spawn('node', [runnerPath, SKILL_DIR], { detached: true, stdio: 'ignore', windowsHide:

The CLI spawns a detached Node updater from a copied script after successful calls. This can execute update logic without per-run user confirmation.

高

scripts/cli.mjs:494

Generic API/secret keys

const key = env.WIND_API_KEY?.trim();

The line reads, filters, or writes WIND_API_KEY material. This credential handling is expected but security-sensitive.

高

scripts/cli.mjs:503

Generic API/secret keys

const key = typeof cfg.wind_api_key === 'string' ? cfg.wind_api_key.trim() : '';

The line reads, filters, or writes WIND_API_KEY material. This credential handling is expected but security-sensitive.

高

scripts/cli.mjs:508

Generic API/secret keys

const envKey = process.env.WIND_API_KEY?.trim();

The line reads, filters, or writes WIND_API_KEY material. This credential handling is expected but security-sensitive.

高

scripts/cli.mjs:808

Generic API/secret keys

.filter(l => l.length > 0 && !/^\s*(export\s+)?WIND_API_KEY\s*=/.test(l));

The line reads, filters, or writes WIND_API_KEY material. This credential handling is expected but security-sensitive.

高

scripts/cli.mjs:810

Generic API/secret keys

lines.push(`WIND_API_KEY=${key}`);

The line reads, filters, or writes WIND_API_KEY material. This credential handling is expected but security-sensitive.

高

scripts/cli.mjs:816

Generic API/secret keys

writeFileSync(file, JSON.stringify({ wind_api_key: key }, null, 2) + '\n', { mode: 0o600 });

The line reads, filters, or writes WIND_API_KEY material. This credential handling is expected but security-sensitive.

高

scripts/update-check.mjs:21

Node.js child_process module

} from 'node:child_process';

The updater imports child_process for synchronous git and npx execution. That command execution can alter installed skill files.

高

scripts/update-check.mjs:184

Synchronous spawn

const result = spawnSync('git', ['ls-remote', source, 'HEAD'], {

The updater runs git ls-remote against a source URL from lock metadata. Arguments are array-based, but this is real external command and network execution.

高

scripts/update-check.mjs:402

Synchronous spawn

const result = spawnSync(bin, args, {

The updater runs npx skills update or add in the background. This package-manager path can modify executable skill content.

高

scripts/update-check.mjs:400

Windows cmd.exe

const bin = isWin ? 'cmd.exe' : 'npx';

On Windows the updater executes a joined command string through cmd.exe. Lock-derived command parts increase shell parsing risk.

高

SKILL.md:9

Node.js child_process module

child_process: true

The skill explicitly declares child_process support, matching executable Node scripts in the package. This is a real permission risk, although not an exploit by itself.

中

scripts/cli.mjs:635

Fetch API call

resp = await fetch(server.endpoint, {

The CLI posts JSON-RPC requests to Wind MCP endpoints with an Authorization bearer token. This is expected, but it sends authenticated data externally.

中

scripts/cli.mjs:493

Synchronous file operations

const env = parseDotenv(readFileSync(globalConfig, 'utf8'));

This file operation reads or writes API key configuration. Permissions are restricted on writes, but credential file access is security-sensitive.

中

scripts/cli.mjs:502

Synchronous file operations

const cfg = JSON.parse(readFileSync(localConfig, 'utf8'));

This file operation reads or writes API key configuration. Permissions are restricted on writes, but credential file access is security-sensitive.

中

scripts/cli.mjs:807

Synchronous file operations

lines = readFileSync(file, 'utf8').split('\n')

This file operation reads or writes API key configuration. Permissions are restricted on writes, but credential file access is security-sensitive.

中

scripts/cli.mjs:811

Synchronous file operations

writeFileSync(file, lines.join('\n') + '\n', {

This file operation reads or writes API key configuration. Permissions are restricted on writes, but credential file access is security-sensitive.

中

scripts/cli.mjs:816

Synchronous file operations

writeFileSync(file, JSON.stringify({ wind_api_key: key }, null, 2) + '\n', { mode: 0o600 });

This file operation reads or writes API key configuration. Permissions are restricted on writes, but credential file access is security-sensitive.

中

scripts/cli.mjs:508

Environment variable access (dot notation)

const envKey = process.env.WIND_API_KEY?.trim();

The CLI reads process.env.WIND_API_KEY. That secret is later used as the bearer token for Wind network requests.

中

scripts/cli.mjs:508

Environment variable object

const envKey = process.env.WIND_API_KEY?.trim();

The CLI reads process.env.WIND_API_KEY. That secret is later used as the bearer token for Wind network requests.

中

scripts/cli.mjs:178

dotenv library

// dotenv 解析: 兼容注释 / 引号 / export 前缀

The custom dotenv parser is used to load WIND_API_KEY from local configuration. This is expected, but it handles sensitive credential material.

中

scripts/update-check.mjs:126

Synchronous file operations

const data = JSON.parse(readFileSync(file, 'utf8'));

The updater reads lock metadata that can influence update source selection. This is expected, but it contributes to supply-chain risk.

中

scripts/update-check.mjs:175

Environment variable object

...process.env

The updater passes the full process environment to git and npx child processes. Any secrets in the environment are forwarded to those commands.

低

scripts/cli.mjs:14

Hardcoded URL

endpoint: 'https://mcp.wind.com.cn/vserver_stock_data/mcp/',