tradingagents-analysis

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill does not exhibit any malicious patterns. It performs its stated function using standard API interaction patterns.
  • [DYNAMIC_EXECUTION]: The analyze.sh script utilizes python3 to securely build JSON payloads and parse API responses. This prevents common shell injection issues and ensures data integrity during tool execution.
  • [DATA_EXFILTRATION]: The skill transmits stock identifiers and analysis parameters to api.510168.xyz. This is a legitimate network operation required for the stock analysis service. Credentials are provided via environment variables, adhering to secret management best practices.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as an interface to an external research tool. It uses structured data formats (JSON) for both input and output, which effectively isolates user data from the execution logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 12:37 AM