portfolio-health-check
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill integrates with Model Context Protocol (MCP) services hosted on Aliyun's DashScope platform (
https://dashscope.aliyuncs.com/api/v1/mcps/...), which are first-party services for the skill author. - [SAFE]: Data collection involves standard financial parameters (fund codes, holding amounts) and utilizes established financial data providers (Qieman, Gildata).
- [SAFE]: Visualization is handled through a structured
RenderEcharttool using predefined templates, posing no code injection risk. - [SAFE]: The execution flow is logically sound, requiring mandatory information (portfolio list) and providing fallback mechanisms (guessing fund codes).
Audit Metadata