data-kr
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The orchestration script
scripts/pack.pyusessubprocess.runto execute internal worker scripts (fdr_client.pyandyfinance_client.py). This is a documented architectural pattern for the skill's multi-layered design. The commands are executed usinguv runand the arguments are strictly managed via normalization functions (e.g.,normalize_ticker), which reduces the risk of argument injection. - [EXTERNAL_DOWNLOADS]: The skill retrieves data from legitimate external sources to fulfill its stated purpose:
- Fetches macroeconomic series from the Federal Reserve Bank of St. Louis (FRED) via the
fred.stlouisfed.orgdomain. - Retrieves Korean equity price and financial data using the
yfinancelibrary. - Accesses Bank of Korea (BOK) economic indicators via the
FinanceDataReaderlibrary. - [PROMPT_INJECTION]: As a data-ingestion skill, it processes external content that could theoretically harbor indirect prompt injections. However, the data consists of financial metrics and time-series observations, which pose a minimal risk of containing executable instructions for the agent context.
Audit Metadata