financial-analysis-stock-screening
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues detected. The skill performs its stated function using legitimate data sources and standard Python processing techniques.- [EXTERNAL_DOWNLOADS]: The skill fetches financial data from trusted and well-known services. Specifically, it retrieves XBRL financial facts from the SEC EDGAR API (data.sec.gov) and market data from Yahoo Finance (query1.finance.yahoo.com, query2.finance.yahoo.com). These network operations are intended for the skill's primary purpose of financial analysis.- [COMMAND_EXECUTION]: The skill requires the agent to execute a local wrapper script (run.sh) which invokes a Python script for data processing. This execution is contained within the skill's own package and uses only the Python standard library, presenting no significant security risk.- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external APIs which could theoretically be used for injection, though the risk is negligible given the trusted nature of the sources.
- Ingestion points: Data is ingested from the SEC EDGAR API in
scripts/get_fundamentals.pyand from Yahoo Finance inscripts/get_quote.py. - Boundary markers: No explicit delimiters are specified for the external data passed into the agent's context.
- Capability inventory: The skill has the capability to perform network requests (urllib) and execute local scripts.
- Sanitization: The scripts parse the raw JSON data from external sources into strictly defined numeric and string fields for financial scoring, which effectively sanitizes the content before it is presented to the agent.
Audit Metadata