sentisense-cli

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches and executes the sentisense package from the NPM registry using npx. The skill explicitly pins the version to 0.47.1 to ensure the execution of immutable, reviewed code.- [COMMAND_EXECUTION]: Utilizes shell commands for market data retrieval, authentication configuration, and data processing with tools like jq.- [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: User-provided stock tickers and query parameters (e.g., <tickers...>, --filter) are used as arguments for the CLI tool.
  • Boundary markers: None explicitly defined in the instructions; the agent relies on the CLI's internal argument parsing.
  • Capability inventory: The skill triggers subprocess execution through npx and writes configuration data to ~/.config/sentisense/.
  • Sanitization: Not explicitly defined; the tool expects standard stock tickers as input.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 04:26 AM
Security Audit — agent-trust-hub — sentisense-cli