futu-quote

Pass

Audited by Gen Agent Trust Hub on Nov 6, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill downloads and executes installation scripts from the vendor's GitHub repository (FutunnOpen/futu-cli) to set up the futu CLI on macOS, Linux, and Windows.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to run futu CLI commands for retrieving stock quotes, historical data, and managing watchlists.
  • [PRIVILEGE_ESCALATION]: The installation instructions for Windows environments suggest using the -ExecutionPolicy Bypass flag to allow the execution of the downloaded PowerShell installation script.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external market data and company information returned by the CLI in JSON format. While this data is technically external, it is sourced from the official Futu market-data API via the CLI tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 6, 2026, 05:39 AM