yahoo-finance

Pass

Audited by Gen Agent Trust Hub on Mar 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The documentation provides instructions to install the 'uv' package manager from 'astral.sh'.
  • Evidence: curl -LsSf https://astral.sh/uv/install.sh | sh and powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex".
  • Note: These resources are provided by a well-known service (Astral) and represent standard installation procedures for the tool.
  • [COMMAND_EXECUTION]: The skill requires manual steps to make the script executable and create a symbolic link for global access.
  • Evidence: chmod +x /path/to/skills/yahoo-finance/yf and ln -sf /path/to/skills/yahoo-finance/yf /usr/local/bin/yf.
  • These are standard administrative tasks for installing local command-line utilities.
  • [REMOTE_CODE_EXECUTION]: The skill uses PEP 723 inline script metadata, which allows the 'uv' tool to automatically manage and install dependencies at runtime.
  • Dependencies listed: yfinance, rich.
  • This is a standard feature of the 'uv' ecosystem for reproducible script execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 16, 2026, 08:18 AM