adr-hshare
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use the
yfinancelibrary to download historical and real-time market data for various stock tickers and currency pairs. - [DATA_EXFILTRATION]: Network activity is directed towards Yahoo Finance APIs via the
yfinancePython package to retrieve public financial information. These operations target a well-known financial service and do not involve sensitive user data. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes external data retrieved from financial markets. However, the data ingested (stock prices, FX rates) is numeric and structured, posing no realistic risk of agent behavioral override.
- Ingestion points: The skill utilizes
yfinance.download()to pull external market data into the execution context. - Boundary markers: The data is treated as numeric input for mathematical calculations (premiums, z-scores).
- Capability inventory: The skill is limited to data retrieval, calculation, and reporting. No file-system writes, administrative commands, or high-privilege operations are present.
- Sanitization: Data is processed as standard data structures (DataFrames/Floats) for financial modeling.
Audit Metadata