financial-data-collector
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides scripts for data collection (
collect_data.py), SEC API interaction (sec_api.py), and data validation (validate_data.py). These scripts use standard Python libraries for networking and data processing. - [EXTERNAL_DOWNLOADS]: The skill fetches financial data from well-known and trusted sources including the official SEC EDGAR system (
sec.gov) and public Yahoo Finance endpoints (query1.finance.yahoo.com). These network operations are intrinsic to the skill's primary purpose of financial research. - [DATA_EXPOSURE]: The skill follows secure practices by not hardcoding any API keys or credentials. It utilizes public endpoints that do not require authentication and encourages the use of local JSON files for testing.
- [DYNAMIC_EXECUTION]: The
collect_data.pyscript usesimportlib.import_module()to optionally loadpandasandyfinance. This is a standard practice for managing optional dependencies and is safe in this context as the module names are static literals.
Audit Metadata