stock-dividend
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Ticker symbols provided as command-line arguments are validated against a strict regular expression (
^[A-Z][A-Z0-9.\-]{0,11}$) inscripts/dividends.py, which prevents the injection of malicious payloads into the LLM prompt and ensures safe command-line processing.\n- [DATA_EXFILTRATION]: Network activity is restricted to the endpointapi.aisa.oneusing the official OpenAI client library. This domain is an established resource for the skill's author (aisa-team), and communication is strictly performed over HTTPS to protect data integrity.\n- [PROMPT_INJECTION]: The skill utilizes a defensive system prompt that explicitly defines the agent's role as a read-only researcher. It includes specific negative constraints to prevent the model from soliciting brokerage credentials or executing financial trades.
Audit Metadata