stock-market-pro
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs expected financial analysis tasks using well-known services (Yahoo Finance, DuckDuckGo, Unusual Whales) and standard Python libraries such as yfinance, matplotlib, and playwright. All external data fetching is consistent with the skill's stated purpose.
- [COMMAND_EXECUTION]: Local script execution for modularity is handled via subprocess.run and subprocess.call using list-based arguments. This method is secure and prevents shell injection vulnerabilities. The interactions between yf.py, news.py, and their helper scripts follow this safe pattern.
- [EXTERNAL_DOWNLOADS]: The skill fetches real-time financial data and news from established platforms. These are legitimate external dependencies required for market analysis and are not associated with remote code execution or malicious payloads.
- [DATA_EXFILTRATION]: No unauthorized data access or exfiltration patterns were identified. Network operations are exclusively used to retrieve public market information as requested by the user.
Audit Metadata