ths-financial-data

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill automatically manages the installation and upgrading of the thsdk Python library from the official Python Package Index (PyPI). This behavior is a documented feature designed to ensure the agent has the necessary tools to fetch financial data.\n
  • Evidence: The ensure_thsdk and install_thsdk functions in scripts/stock_utils.py handle dependency checks and updates.\n- [COMMAND_EXECUTION]: The skill invokes shell commands via Python's subprocess module to perform environment setup. This execution is limited to package management using pip for the required library.\n
  • Evidence: subprocess.run is utilized within scripts/stock_utils.py to run pip install --upgrade thsdk using the current Python executable.\n- [SAFE]: All core functionalities, including network access for financial data and local package management, are consistent with the skill's stated purpose as a financial analysis tool. The implementation follows standard practices for a data-fetching utility.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 07:46 PM
Security Audit — agent-trust-hub — ths-financial-data