report-stock-snapshot
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust three-layer architecture (Data, Analysis, Report) designed for financial reporting. Behavior is consistent with its stated purpose of orchestration and formatting.
- [SAFE]: The
snapshot_format.pyscript is a 'pure' function that handles JSON data processing locally. It does not perform network operations, subprocess spawning, or write to sensitive file system paths. - [COMMAND_EXECUTION]: The orchestration pipeline in
SKILL.mduses shell commands (uv run) to execute local data-gathering scripts. It includes a safety transformation (ticker_safe) for temporary file management to prevent path traversal when handling ticker symbols with special characters like/or.. - [SAFE]: The skill ingests data from external financial sources (e.g., yfinance, MOPS, TDnet) through its dependencies, but the processing logic is restricted to data extraction and formatting, minimizing the risk of indirect prompt injection.
Audit Metadata