stock-liquidity

Pass

Audited by Gen Agent Trust Hub on Apr 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads financial market data from Yahoo Finance using the yfinance library to perform liquidity analysis. These are routine network requests to a public data provider.
  • [COMMAND_EXECUTION]: The skill utilizes subprocess.check_call to install required Python packages (yfinance, pandas, numpy) via pip if they are not present in the environment. This is a standard dependency management practice.
  • [COMMAND_EXECUTION]: A dynamic context injection pattern (!command) is used in SKILL.md to check the status of required dependencies at load time. This command (python3 -c "import yfinance...") is benign and used solely for environment verification.
  • [DATA_EXFILTRATION]: No sensitive data access or exfiltration patterns were detected. The skill focuses on public ticker information and does not interact with local credentials, SSH keys, or environment variables containing secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 11, 2026, 08:00 PM