zettaranc-perspective

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches stock market data and financial information from established and well-known services, including Tushare Pro, Indevs, Baidu, Tencent, and Eastmoney. These connections are intended for legitimate data retrieval necessary for market analysis.
  • [COMMAND_EXECUTION]: Scripts located in the corpus/ directory, such as batch_download_bilibili.py, utilize subprocess.run to invoke external tools like yt-dlp. This is used exclusively for collecting media to build the skill's knowledge base and is consistent with the project's documentation.
  • [DYNAMIC_EXECUTION]: The module modules/core/_rust_compat.py uses dynamic module loading via __import__ to facilitate the loading of a compiled Rust extension (_core_compute). This allows the skill to perform complex quantitative calculations at native speeds while providing a Python fallback, representing a standard optimization technique.
  • [DATA_EXPOSURE]: Secret management is handled securely through environment variables and .env files. Analysis found no hardcoded credentials; placeholders are used in documentation and examples, encouraging users to supply their own API keys safely.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 08:00 AM
Security Audit — agent-trust-hub — zettaranc-perspective