The Agent Skills Directory

[SAFE]: The skill is a legitimate utility for financial market data retrieval. It uses the AISA_API_KEY environment variable for authorized authentication to the vendor's API (api.aisa.one).
[EXTERNAL_DOWNLOADS]: The script declares a dependency on the well-known openai Python package, which is used for communicating with the LLM backend.
[DATA_EXPOSURE_AND_EXFILTRATION]: No evidence of sensitive file access (e.g., SSH keys, cloud credentials) or unauthorized data exfiltration was found. The network activity is restricted to the intended API endpoint.
[INDIRECT_PROMPT_INJECTION]: While the skill processes external financial data (Yahoo Finance, CoinGecko), it does not have capabilities that could be exploited by malicious data, such as file system writes or arbitrary command execution.

stock-hot