longbridge-market-data

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for the agent to use the longbridge command-line interface. All commands (such as quote, kline, depth, and ipo) are scoped to financial market data retrieval and are consistent with the skill's stated purpose.- [EXTERNAL_DOWNLOADS]: The skill references the official longbridge-terminal tool and provides installation instructions via Homebrew (brew tap longbridge/tap && brew install longbridge/tap/longbridge-terminal). These resources belong to the vendor and are necessary for the skill's local functionality.- [INDIRECT_PROMPT_INJECTION]: The skill processes financial market data returned by the Longbridge CLI. While this data is external, it is sourced from a structured financial API, and the skill does not possess high-risk write capabilities or arbitrary code execution paths that would typically be targets for indirect injection attacks.- [CREDENTIALS_SAFE]: The skill does not contain hardcoded secrets. It correctly instructs users to manage their own authentication through the longbridge auth login command, which is a standard and secure practice for CLI tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 12:24 PM