skills/gauss314/skills/alpha-vantage/Gen Agent Trust Hub

alpha-vantage

Pass

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: No override instructions, bypass markers, or instructions to ignore safety guidelines were detected in the documentation or reference files.
  • [CREDENTIALS_UNSAFE]: The skill uses placeholders like 'TU_API_KEY_AQUI' for documentation purposes and correctly recommends using environment variables (ALPHAVANTAGE_API_KEY) for secure credential management. No hardcoded secrets were found.
  • [DATA_EXFILTRATION]: Network activity is restricted to the official Alpha Vantage API endpoint (https://www.alphavantage.co/query). No patterns of sensitive file access or exfiltration to unknown domains were observed.
  • [COMMAND_EXECUTION]: The provided Python scripts perform specific, documented tasks such as downloading financial quotes and time series data. They do not execute arbitrary shell commands or user-supplied input strings.
  • [EXTERNAL_DOWNLOADS]: The skill relies on standard, well-known Python packages (requests, pandas). It does not perform any remote script execution (e.g., curl|bash) or download executable content from untrusted sources.
  • [SAFE]: The code is transparent and follows best practices for a financial data utility. No obfuscation, persistence mechanisms, or privilege escalation attempts were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 12, 2026, 09:42 PM
Security Audit — agent-trust-hub — alpha-vantage