a-stock-financial

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The export_excel.py and fetch_reports.py scripts are designed to be executed via the command line to retrieve financial data and save it to the local file system. The agent uses these scripts to process stock symbols and company names provided by the user.
  • [PROMPT_INJECTION]: The skill processes financial data retrieved from the akshare library and WebSearch results, which constitutes an indirect prompt injection surface.
  • Ingestion points: Data is ingested through the akshare Python library and from the results of web searches conducted to find stock symbols.
  • Boundary markers: Not present; the scripts assume the data returned from financial APIs is structured and factual.
  • Capability inventory: The skill can perform network operations to fetch financial data and write Excel files to the disk using specified or default paths.
  • Sanitization: Command-line arguments are parsed and validated using the argparse library, providing basic protection against injection at the argument level.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 02:12 AM
Security Audit — agent-trust-hub — a-stock-financial