alpha-vantage
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No override instructions, bypass markers, or instructions to ignore safety guidelines were detected in the documentation or reference files.
- [CREDENTIALS_UNSAFE]: The skill uses placeholders like 'TU_API_KEY_AQUI' for documentation purposes and correctly recommends using environment variables (
ALPHAVANTAGE_API_KEY) for secure credential management. No hardcoded secrets were found. - [DATA_EXFILTRATION]: Network activity is restricted to the official Alpha Vantage API endpoint (
https://www.alphavantage.co/query). No patterns of sensitive file access or exfiltration to unknown domains were observed. - [COMMAND_EXECUTION]: The provided Python scripts perform specific, documented tasks such as downloading financial quotes and time series data. They do not execute arbitrary shell commands or user-supplied input strings.
- [EXTERNAL_DOWNLOADS]: The skill relies on standard, well-known Python packages (
requests,pandas). It does not perform any remote script execution (e.g., curl|bash) or download executable content from untrusted sources. - [SAFE]: The code is transparent and follows best practices for a financial data utility. No obfuscation, persistence mechanisms, or privilege escalation attempts were found.
Audit Metadata