china-portfolio-monitoring

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary purpose is financial monitoring and reporting for public companies. All logic and templates are consistent with legitimate portfolio management practices.
  • [EXTERNAL_DOWNLOADS]: The skill references 'AkShare MCP' and 'iFind MCP' for data retrieval. AkShare is a well-known, legitimate open-source Python library for fetching Chinese financial market data.
  • [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface as it processes external market announcements and analyst reports.
  • Ingestion points: External data sources including iFind, AkShare, 巨潮公告 (announcements), and 券商研报 (analyst reports).
  • Boundary markers: The templates do not use specific delimiters for untrusted external content.
  • Capability inventory: No dangerous operations like subprocess calls, shell execution, or file writes are present in the skill definition.
  • Sanitization: No explicit sanitization or filtering of external data is defined.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 01:06 PM
Security Audit — agent-trust-hub — china-portfolio-monitoring