data-tw
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/pack.pyscript usessubprocess.run()to orchestrate the execution of bundled client scripts (e.g.,mops_client.py,twse_openapi_client.py). This is the intended primary purpose of the skill and follows safe practices by using argument lists. - [EXTERNAL_DOWNLOADS]: The skill fetches financial and economic data from several official Taiwan government domains and well-known financial services (e.g.,
cpx.cbc.gov.tw,mops.twse.com.tw,yahoo.com). These are legitimate sources for the skill's stated purpose. - [SAFE]: The use of
verify=Falsein network requests is explicitly documented as a workaround for known SSL certificate issues on specific government websites and is a common practice for accessing these particular resources.
Audit Metadata