skills/clawic/skills/Yahoo/Gen Agent Trust Hub

Yahoo

Pass

Audited by Gen Agent Trust Hub on Apr 20, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches data from well-known Yahoo Finance endpoints (finance.yahoo.com and query1.finance.yahoo.com) to provide real-time and historical market information.
  • [COMMAND_EXECUTION]: Executes local Python scripts (yahoo_quote.py, yahoo_search.py, yahoo_brief.py) to parse and display financial data.
  • [COMMAND_EXECUTION]: Includes setup instructions using standard shell commands (mkdir, chmod) for directory initialization.
  • [DATA_EXFILTRATION]: Communication is strictly limited to ticker symbols and search terms sent to official Yahoo Finance services. No sensitive local files or credentials are exfiltrated.
  • [SAFE]: No malicious code, obfuscated instructions, or prompt injection patterns were found. The skill adheres to best practices for local data security using restrictive file permissions.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 20, 2026, 10:45 AM
Security Audit — agent-trust-hub — Yahoo