skills/kouko/monkey-skills/data-tw/Gen Agent Trust Hub

data-tw

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/pack.py script uses subprocess.run() to orchestrate the execution of bundled client scripts (e.g., mops_client.py, twse_openapi_client.py). This is the intended primary purpose of the skill and follows safe practices by using argument lists.
  • [EXTERNAL_DOWNLOADS]: The skill fetches financial and economic data from several official Taiwan government domains and well-known financial services (e.g., cpx.cbc.gov.tw, mops.twse.com.tw, yahoo.com). These are legitimate sources for the skill's stated purpose.
  • [SAFE]: The use of verify=False in network requests is explicitly documented as a workaround for known SSL certificate issues on specific government websites and is a common practice for accessing these particular resources.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 05:05 PM
Security Audit — agent-trust-hub — data-tw