institutional-flow-tracker
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill's documentation and instructions are focused entirely on its functional purpose. There are no indications of adversarial prompting, role-play injections, or attempts to override safety guardrails.
- [CREDENTIALS_UNSAFE]: No hardcoded secrets, tokens, or API keys were found within the scripts or documentation. The skill follows best practices by requiring the user to provide their own Financial Modeling Prep API key via environment variables.
- [DATA_EXFILTRATION]: Network communication is exclusively directed to the Financial Modeling Prep API domain for the purpose of retrieving financial data. No access to sensitive local files (like SSH keys or AWS configs) or transmission of data to unauthorized domains was observed.
- [REMOTE_CODE_EXECUTION]: The skill does not perform any remote script downloads or dynamic execution of code from the internet. All logic is contained within the local Python scripts and relies on the trusted 'requests' library.
- [COMMAND_EXECUTION]: The Python scripts perform standard data fetching and report generation. No dangerous subprocess calls, shell injections, or privilege escalation attempts were found.
- [SAFE]: The skill includes advanced data quality modules to ensure the reliability of the financial metrics it provides, demonstrating a commitment to correctness and safe operation.
Audit Metadata