data-jp
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
pack.pyscript orchestrates data collection by executing other bundled scripts within the skill directory. - Evidence: It uses
subprocess.runto call scripts such asyfinance_client.py,edinet_client.py,boj_client.py,estat_client.py,ecb_client.py, andtdnet_client.py. - Context: The commands are constructed using lists of arguments (rather than shell strings), which prevents shell injection. The executed scripts are part of the skill's own package.
- [EXTERNAL_DOWNLOADS]: The skill connects to multiple external endpoints to fetch financial and statistical data.
- Evidence:
boj_client.py: Fetches fromstat-search.boj.or.jp(Bank of Japan).estat_client.py: Fetches fromdashboard.e-stat.go.jp(Japan Official Statistics).edinet_client.py: Fetches fromapi.edinet-fsa.go.jp(Financial Services Agency, Japan).ecb_client.py: Fetches fromdata-api.ecb.europa.eu(European Central Bank).tdnet_client.py: Fetches fromwebapi.yanoshin.jp(Third-party TDnet aggregator).yfinance_client.py: Fetches from Yahoo Finance.- Context: These connections are required for the skill's primary purpose and target well-known or official institutional sources.
Audit Metadata