edgartools-sec-data

Pass

Audited by Gen Agent Trust Hub on Jul 2, 2026

Risk Level: SAFE
Full Analysis
  • Standard Library Usage: The skill instructions leverage the edgartools Python package, which is a common tool for programmatic access to SEC filings. The skill assumes this tool is pre-installed in the execution environment.
  • SEC API Compliance: The skill correctly identifies and implements the SEC's requirement for a contact identity header (set_identity), which is a necessary practice for automated access to the EDGAR system. The suggestion to use an environment variable (EDGAR_IDENTITY) for this purpose follows established security best practices for configuration management.
  • Data Processing Context: While the skill retrieves and processes external content from the SEC (a third-party source), it focuses on targeted extraction of financial statements and specific regulatory sections like 'Item 1A' (Risk Factors). This structured approach is consistent with the intended analytical purpose of the skill.
  • Safe Configuration Practices: The skill avoids hardcoding sensitive information, instead providing placeholders or referencing environment variables for configuration, which reduces the risk of credential exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 2, 2026, 09:26 PM
Security Audit — agent-trust-hub — edgartools-sec-data