hithink-finance-symbol
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions facilitate the use of the
hithink-financeCLI tool to perform financial symbol identification and listing. The usage of this vendor-specific tool is consistent with the skill's primary purpose. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied queries and external CLI outputs, which constitutes a potential injection surface. However, the instructions include specific guidelines for data disambiguation and require the use of the
--outputflag for large datasets, which limits the amount of raw external data directly entering the agent's context and mitigates risk.
Audit Metadata