yfinance
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: All identified network operations target well-known Yahoo Finance API domains (query1.finance.yahoo.com, query2.finance.yahoo.com) for market data retrieval.
- [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill documentation references the yfinance Python library, which is a well-known and standard package for financial data analysis.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external market data from Yahoo Finance. Ingestion points: Yahoo Finance API endpoints (v1/v7/v8/v10) via the internal yahoo_client. Boundary markers: The tools return data in structured JSON envelopes. Capability inventory: The skill is restricted to read-only HTTP GET requests for data retrieval and does not employ file-write or command execution capabilities. Sanitization: The DataLoader normalizes symbols and filters malformed OHLC rows before returning data to the agent context.
Audit Metadata