stock-market-pro
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
subprocessmodule to manage its internal logic across different files. For example,scripts/yf.pycallsscripts/uw.pyto handle options scraping, andscripts/news.pydelegates search tasks toscripts/ddg_search.py. These calls are implemented using list-based arguments and do not useshell=True, which effectively prevents command injection risks from user-supplied ticker symbols or queries.- [EXTERNAL_DOWNLOADS]: To provide its core functionality, the skill interacts with several external services and libraries. It uses theyfinancelibrary for Yahoo Finance data, theddgslibrary for DuckDuckGo searches, andplaywrightto scrape data fromunusualwhales.com. These are well-known services and libraries consistent with the skill's purpose of financial research and data visualization.- [DATA_EXPOSURE]: The skill generates charts and reports which are saved to the/tmp/directory. This is a standard practice for temporary file generation and does not involve the exposure of sensitive user data or credentials.
Audit Metadata