skills/kouko/monkey-skills/data-jp/Gen Agent Trust Hub

data-jp

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The pack.py script orchestrates data collection by executing other bundled scripts within the skill directory.
  • Evidence: It uses subprocess.run to call scripts such as yfinance_client.py, edinet_client.py, boj_client.py, estat_client.py, ecb_client.py, and tdnet_client.py.
  • Context: The commands are constructed using lists of arguments (rather than shell strings), which prevents shell injection. The executed scripts are part of the skill's own package.
  • [EXTERNAL_DOWNLOADS]: The skill connects to multiple external endpoints to fetch financial and statistical data.
  • Evidence:
  • boj_client.py: Fetches from stat-search.boj.or.jp (Bank of Japan).
  • estat_client.py: Fetches from dashboard.e-stat.go.jp (Japan Official Statistics).
  • edinet_client.py: Fetches from api.edinet-fsa.go.jp (Financial Services Agency, Japan).
  • ecb_client.py: Fetches from data-api.ecb.europa.eu (European Central Bank).
  • tdnet_client.py: Fetches from webapi.yanoshin.jp (Third-party TDnet aggregator).
  • yfinance_client.py: Fetches from Yahoo Finance.
  • Context: These connections are required for the skill's primary purpose and target well-known or official institutional sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 05:06 PM
Security Audit — agent-trust-hub — data-jp