morningstar
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches financial data from Morningstar's official subdomains (e.g., tools.morningstar.co.uk). These are well-known and legitimate service domains.
- [COMMAND_EXECUTION]: Provides a Python CLI tool (
fetch_morningstar.py) to automate data retrieval and save results to local JSON or CSV files. This behavior is explicitly defined and required for the skill's functionality. - [SAFE]: Network communication is handled through the standard and reputable
requestslibrary. - [SAFE]: The hardcoded token
klr5zyak8xis a functional constant for accessing the public-facing API endpoint discovered via reverse engineering; it is not a sensitive private credential or user secret.
Audit Metadata