stock-market-pro

Pass

Audited by Gen Agent Trust Hub on May 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the subprocess module to manage its internal logic across different files. For example, scripts/yf.py calls scripts/uw.py to handle options scraping, and scripts/news.py delegates search tasks to scripts/ddg_search.py. These calls are implemented using list-based arguments and do not use shell=True, which effectively prevents command injection risks from user-supplied ticker symbols or queries.- [EXTERNAL_DOWNLOADS]: To provide its core functionality, the skill interacts with several external services and libraries. It uses the yfinance library for Yahoo Finance data, the ddgs library for DuckDuckGo searches, and playwright to scrape data from unusualwhales.com. These are well-known services and libraries consistent with the skill's purpose of financial research and data visualization.- [DATA_EXPOSURE]: The skill generates charts and reports which are saved to the /tmp/ directory. This is a standard practice for temporary file generation and does not involve the exposure of sensitive user data or credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
May 8, 2026, 08:18 AM