Is CNEquity safe to install?

Security audit of rootSunc/CNEquity · MCP Server by rootSunc · ★ 948

✓ SAFE Basic audit · rule-based scan · 42 published rules

Yes — CNEquity passed AgentSkillsHub's rule-based security scan with no dangerous patterns detected. As with any third-party skill, confirm what credentials it requests before production use.

What it is: 开源中国股市（A股）本地数据湖：沪深股票行情、A股股票数据与金融数据，面向量化研究、量化交易与回测，含财务数据、期货数据、资金流向、公告、指数行业与宏观。55 个日更数据集，复权与历史成分内置，行级溯源、PIT，MCP 原生。免注册、免 Token，自托管。Open-source China stock market data lake for quant research, backtesting and AI agents.

Red flags detected (1)

🚩 cron persistence

Audit summary

Security grade	✓ SAFE
Quality score	60/100
GitHub stars	948
Language	Python
License	Apache-2.0
Last updated	2026-11-03

Check before you install

What credentials does it ask for, and where are they stored?
Is the maintainer identifiable and the repo actively maintained?
Read the install scripts and network calls before trusting it.

Run a live scan → Full details & install 5-dimension deep audit

Related MCP Server audits

Is rea safe? — SAFE · ★ 432.0k
Is ECC safe? — SAFE · ★ 295.0k
Is n8n safe? — SAFE · ★ 209.6k
Is dify safe? — SAFE · ★ 160.4k
Is open-webui safe? — SAFE · ★ 157.6k
Is cc-switch safe? — SAFE · ★ 151.8k

Browse all MCP Server skills →

This is AgentSkillsHub's free basic audit: an automated rule-based scan with 42 published rules built on SlowMist's agent-security taxonomy (credential theft, obfuscated payloads, privilege escalation, covert instructions to the agent, and more) across 186,000+ open-source AI agent skills and MCP servers, refreshed every 8 hours. A SAFE grade is a scan result, not a guarantee — deep 5-dimension audits (code · credentials · vendor · supply-chain · operational) are available for enterprise. Audited: 2026-11-05.