china-deal-tracker

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill functions as a productivity template for investment banking workflows. It uses standard Markdown tables and JSON structures to organize deal information without attempting to execute unauthorized code or access sensitive system files.
  • [EXTERNAL_DOWNLOADS]: The skill mentions 'wind-mcp' and 'AkShare MCP' as data sources. These are legitimate financial data integration tools commonly used in the industry. There are no patterns of piping remote scripts to a shell or downloading executable content from untrusted sources.
  • [CREDENTIALS_UNSAFE]: The documentation mentions the need for a 'WIND_API_KEY' for one of the data tiers and provides an example format ('ak_...'). However, no hardcoded API keys or secrets are present in the file, and it directs users to the official vendor website to acquire their own credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 01:06 PM
Security Audit — agent-trust-hub — china-deal-tracker