barchart
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill is a legitimate tool for scraping publicly available financial data from Barchart.com. Analysis of the source code and documentation confirms that its behavior aligns with its stated purpose without any malicious intent or hidden functionality.
- [EXTERNAL_DOWNLOADS]: The skill depends on the 'requests' Python package for its network operations. This is a standard, well-vetted, and industry-standard library for handling HTTP requests.
- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection because it processes data from an external website.
- Ingestion points: fetch_barchart.py fetches HTML and JSON data from barchart.com using HTTP GET requests.
- Boundary markers: The skill does not use specific delimiters or instructions to prevent the agent from following potential instructions embedded in the scraped data.
- Capability inventory: The script's capabilities are limited; it does not perform any system-level commands, subprocess execution, or unauthorized file modifications.
- Sanitization: The data extraction process uses structured regular expressions and JSON parsing, which effectively filters the input to specific fields, though no explicit security sanitization for LLM instructions is present.
Audit Metadata