india-stock-market-nse-india

Pass

Audited by Gen Agent Trust Hub on Mar 30, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the @aiagenta2z/onekey-gateway package from the npm registry. This is a vendor-owned package used to facilitate communication with the FinanceAgent API.
  • [COMMAND_EXECUTION]: The skill uses the onekey CLI tool (invoked via npx) to perform API calls. This is the intended behavior for interacting with the DeepNLP OneKey Agent Router.
  • [DATA_EXFILTRATION]: The skill communicates with https://agent.deepnlp.org/agent_router to retrieve stock market data. This involves sending the DEEPNLP_ONEKEY_ROUTER_ACCESS API key in the request header, which is the documented and necessary authentication method for this service.
  • [CREDENTIALS_UNSAFE]: The skill provides instructions for managing sensitive API keys using environment variables (export DEEPNLP_ONEKEY_ROUTER_ACCESS), which aligns with security best practices for avoiding hardcoded secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 30, 2026, 02:40 PM
Security Audit — agent-trust-hub — india-stock-market-nse-india