china-cim-builder
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill identifies several legitimate Chinese financial data providers (Wind, iFind, AkShare) and provides instructions for connecting to their APIs. These are well-known professional services in the financial industry.
- [COMMAND_EXECUTION]: The skill references standard Python function calls (e.g.,
get_stock_info,get_financials) for retrieving market data. These operations are restricted to data retrieval and do not involve arbitrary command execution or system modification. - [CREDENTIALS_UNSAFE]: While the skill mentions the requirement for a
WIND_API_KEY, it correctly instructs the user to apply for their own key and does not contain any hardcoded secrets. It also references using environment variables (IFIND_DATA_SOURCE_MODE) for configuration, which is a standard and safe practice.
Audit Metadata