public-fund-financial-indicators
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script in scripts/API_01CON_03PBPTFND_04FINRPFM_01PBPTFNDFININD.js connects to gstskill.95363.com to retrieve fund data. This domain is the official service portal for Caida Securities, the vendor specified in the skill description.
- [COMMAND_EXECUTION]: The skill documentation provides instructions for executing a Node.js script to process data queries. The script is focused on API interaction and does not perform any dangerous system operations.
- [SAFE]: No signs of prompt injection, data exfiltration to unauthorized domains, or obfuscation were found. The use of environment variables for the CDZQ_CLIENT_KEY is a standard and safe practice for managing secrets in this context.
Audit Metadata