stock-price
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill retrieves financial data from reputable domains such as qt.gtimg.cn (Tencent), gu.sina.cn (Sina), and eastmoney.com. These are established services, and the use of curl for data retrieval is a standard practice for this financial tracking use case.
- [PROMPT_INJECTION]: The skill ingests data from external financial websites, creating a surface for potential indirect prompt injection. The risk is minimized as the data primarily consists of structured financial metrics from trusted sources.
- Ingestion points: The skill fetches data from qt.gtimg.cn, gu.sina.cn, and data.eastmoney.com.
- Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are provided for the external content.
- Capability inventory: The skill utilizes curl for API requests and browser tools (navigate, get_readable) for web data extraction.
- Sanitization: No specific sanitization or filtering of the retrieved content is described.
Audit Metadata