yahoo-finance
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation includes standard installation instructions for the 'uv' tool from its official domain. These commands (curl piped to sh and PowerShell Invoke-Expression) are the recognized installation methods for this utility.
- [COMMAND_EXECUTION]: The script setup instructions use standard shell commands such as chmod and ln to integrate the tool into the user's local environment.
- [INDIRECT_PROMPT_INJECTION]: The skill fetches stock market data from Yahoo Finance. While this involves ingesting external data, the described functionality is limited to formatting and displaying information in the terminal, following a safe data-retrieval pattern. (Ingestion: Yahoo Finance API; Capability: Formatted terminal output)
- [NO_CODE]: The executable script 'yf' mentioned in the documentation was not provided in the analyzed file set; the analysis is based on the provided documentation and metadata.
Audit Metadata