jquants-cli-usage
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a documentation and usage guide for a legitimate financial CLI tool. It describes standard authentication procedures, such as using local configuration files (~/.config/jquants/credentials.json) and environment variables, which are industry-standard practices for CLI utilities. No malicious code, obfuscation, or unauthorized network activity was detected.- [INDIRECT_PROMPT_INJECTION]: The skill documentation includes commands that ingest external financial data from the J-Quants API. While this presents a surface for indirect prompt injection, it is an essential part of the tool's intended financial data retrieval function and does not introduce specific vulnerabilities.\n
- Ingestion points: Command outputs from J-Quants API endpoints (e.g., equities, financials, indices).\n
- Boundary markers: None defined in the skill instructions.\n
- Capability inventory: Terminal output and file-writing capabilities (via the --save flag).\n
- Sanitization: Not mentioned in the CLI documentation.
Audit Metadata