stock-price-updater
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script fetches real-time stock market data from Yahoo Finance and AkShare. These are well-known and legitimate services for financial market information.
- [COMMAND_EXECUTION]: The instructions direct the agent to execute a Python script (
scripts/update_stock_prices.py) that processes user-provided Excel files. The script handles file paths as direct arguments and performs specific, documented tasks. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from user-provided Excel files (stock codes) to determine which data to fetch from external APIs.
- Ingestion points: The script reads data from Excel files using
pandas.read_excelinscripts/update_stock_prices.py. - Boundary markers: No specific delimiters are used for the data extracted from the Excel files.
- Capability inventory: The skill can perform network operations via
yfinanceandakshareand modify local files viapandas. - Sanitization: Input stock codes are validated using regular expressions to match known market patterns (e.g., A-shares, Hong Kong, US stocks) before being used in API requests.
Audit Metadata