longbridge-market-data
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to use the
longbridgecommand-line interface. All commands (such asquote,kline,depth, andipo) are scoped to financial market data retrieval and are consistent with the skill's stated purpose.- [EXTERNAL_DOWNLOADS]: The skill references the officiallongbridge-terminaltool and provides installation instructions via Homebrew (brew tap longbridge/tap && brew install longbridge/tap/longbridge-terminal). These resources belong to the vendor and are necessary for the skill's local functionality.- [INDIRECT_PROMPT_INJECTION]: The skill processes financial market data returned by the Longbridge CLI. While this data is external, it is sourced from a structured financial API, and the skill does not possess high-risk write capabilities or arbitrary code execution paths that would typically be targets for indirect injection attacks.- [CREDENTIALS_SAFE]: The skill does not contain hardcoded secrets. It correctly instructs users to manage their own authentication through thelongbridge auth logincommand, which is a standard and secure practice for CLI tools.
Audit Metadata