rqams-cli
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/init_skill.pyscript downloads markdown documentation files from the official vendor repository on GitHub (https://raw.githubusercontent.com/ricequant/rqams-cli/). These files are used to populate a local documentation cache. - [COMMAND_EXECUTION]: The skill requires executing several shell commands, including
npm installfor tool setup,pythonfor script-based initialization, and therqamscbinary for primary data operations. - [CREDENTIALS_UNSAFE]: The skill manages authentication by directing the agent to create a local JSON payload template. The user is instructed to fill in their password manually within this file, which is then passed to the
rqamsc setupcommand. The skill explicitly instructs the agent to delete this temporary file and avoid logging sensitive credentials.
Audit Metadata