china-variance-commentary
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily instructional, defining a workflow for financial analysis. It references legitimate financial data tools and services (iFind, AkShare, Wind, and Juchao) which are standard in the industry.
- [DATA_EXPOSURE]: No hardcoded credentials, sensitive file paths, or unauthorized data access patterns were found. The use of environment variables for configuration (e.g.,
IFIND_DATA_SOURCE_MODE) is a standard practice for managing tool preferences. - [PROMPT_INJECTION]: There are no attempts to override system prompts, bypass safety filters, or extract underlying instructions.
- [EXTERNAL_DOWNLOADS]: While the skill mentions various financial data sources, it does not contain code to download or execute external scripts or unverified packages.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests financial data from external APIs. While this is an ingestion surface, the lack of dangerous capabilities (like file system writes or arbitrary command execution) results in a safe profile for this specific use case.
Audit Metadata