xtb-wealthfolio-export
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides shell scripts for environment management and data conversion (scripts/setup-env.sh, scripts/export-wealthfolio.sh). It also utilizes a Python heredoc in the validation script to verify tool availability and configuration.
- [EXTERNAL_DOWNLOADS]: The application retrieves market data and exchange rates from Yahoo Finance through the yfinance library. Additionally, the setup script installs standard data processing dependencies from the official PyPI registry.
- [SAFE]: The transformation logic relies on standard libraries and regular expressions. The generated HTML reports implement security best practices, including HTML entity escaping and safe JSON serialization, to ensure safe visualization of results.
Audit Metadata