futu-quote
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill downloads and executes installation scripts from the vendor's GitHub repository (
FutunnOpen/futu-cli) to set up thefutuCLI on macOS, Linux, and Windows. - [COMMAND_EXECUTION]: The skill uses the
Bashtool to runfutuCLI commands for retrieving stock quotes, historical data, and managing watchlists. - [PRIVILEGE_ESCALATION]: The installation instructions for Windows environments suggest using the
-ExecutionPolicy Bypassflag to allow the execution of the downloaded PowerShell installation script. - [INDIRECT_PROMPT_INJECTION]: The skill processes external market data and company information returned by the CLI in JSON format. While this data is technically external, it is sourced from the official Futu market-data API via the CLI tool.
Audit Metadata