stock-analysis
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches financial data, news headlines, and market sentiment from reputable services including Yahoo Finance, CoinGecko, Google News, and the SEC EDGAR database.
- [COMMAND_EXECUTION]: Utilizes controlled subprocess calls to execute internal scripts and the third-party
birdCLI utility for sentiment analysis; arguments are passed as lists to prevent shell injection vulnerabilities. - [CREDENTIALS_UNSAFE]: Follows security best practices by instructing users to manage sensitive social media session tokens through environment variables or
.envfiles rather than hardcoding credentials in the source code. - [PROMPT_INJECTION]: Processes external content from news and social media feeds, which represents a surface for indirect prompt injection; however, the skill uses specific ticker extraction patterns and shows no evidence of malicious behavior.
Audit Metadata