hithink-finance
Warn
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: MEDIUMPERSISTENCEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PERSISTENCE]: The skill provides explicit instructions and script snippets for the agent to modify user shell configuration files, including ~/.bashrc and ~/.zshenv, to persist the HITHINK_FINANCE_API_KEY environment variable (documented in references/api-key-onboarding.md).
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes external content that includes raw HTML and Markdown from financial news and announcements, creating a vulnerability surface. Evidence: 1. Ingestion points: News article content in references/api/news/article-detail.md (data.content) and announcement details in references/api/news/notice-detail.md; 2. Boundary markers: Absent; 3. Capability inventory: Shell command execution via the CLI tool and network requests via curl; 4. Sanitization: Not documented for the retrieved article content.
- [EXTERNAL_DOWNLOADS]: The skill directs the user to install a global Node.js package (@hithink-tech/hithink-finance-cli) and facilitates the download of large financial datasets in Parquet format from S3 pre-signed URLs (references/api/market-dumps.md).
- [COMMAND_EXECUTION]: The documentation includes complex shell command templates involving curl, jq, and duckdb for processing downloaded financial data files locally.
Audit Metadata