skills/moshe-ship/mkhlab/saudi-stocks/Gen Agent Trust Hub

saudi-stocks

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches data from Twelve Data (a well-known financial API provider) and the official Saudi Capital Market Authority (CMA) Open Data portal. These are legitimate, non-executable data sources required for the skill's primary function.
  • [COMMAND_EXECUTION]: Uses curl to retrieve JSON data. It employs python3 -m json.tool to format the output for readability. This is a standard utility for pretty-printing JSON and does not involve executing remote content as code.
  • [CREDENTIALS_UNSAFE]: The skill correctly instructs the agent to use an environment variable ($TWELVE_DATA_KEY) rather than hardcoding API credentials, which is a recommended security practice.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 01:16 PM
Security Audit — agent-trust-hub — saudi-stocks