Skills
Navigate
skills/hithink-tech/financial-api/hithink-finance-market/Gen Agent Trust Hub

hithink-finance-market

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill is designed to execute the hithink-finance CLI tool to perform financial data operations such as fetching snapshots, history, and trading calendars.
  • Evidence: Commands like hithink-finance market snapshot and hithink-finance market history are used throughout the reference files.
  • [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection because it processes external data from financial services and local files.
  • Ingestion points: Data is ingested from the hithink-finance remote API and local files specified via the --codes-file parameter (e.g., codes.txt).
  • Boundary markers: Not explicitly defined in the provided files; the agent relies on the structured output of the CLI tool.
  • Capability inventory: The skill can execute CLI commands and write data to the local file system using the --output parameter.
  • Sanitization: No explicit sanitization or filtering of the retrieved market data is mentioned before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 04:57 AM