yahoo-finance
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation provides instructions to install the 'uv' package manager from 'astral.sh'.
- Evidence:
curl -LsSf https://astral.sh/uv/install.sh | shandpowershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex". - Note: These resources are provided by a well-known service (Astral) and represent standard installation procedures for the tool.
- [COMMAND_EXECUTION]: The skill requires manual steps to make the script executable and create a symbolic link for global access.
- Evidence:
chmod +x /path/to/skills/yahoo-finance/yfandln -sf /path/to/skills/yahoo-finance/yf /usr/local/bin/yf. - These are standard administrative tasks for installing local command-line utilities.
- [REMOTE_CODE_EXECUTION]: The skill uses PEP 723 inline script metadata, which allows the 'uv' tool to automatically manage and install dependencies at runtime.
- Dependencies listed:
yfinance,rich. - This is a standard feature of the 'uv' ecosystem for reproducible script execution.
Audit Metadata