stock-screener
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for using a CLI tool via
npx -y sentisense@0.52.0. This downloads the tool from the official npm registry (a well-known service). The download is version-pinned and related to the vendor's primary service. - [COMMAND_EXECUTION]: The documentation includes bash examples for running the
sentisenseCLI andcurlfor interacting with the SentiSense REST API. These are standard integration methods for a financial data service and do not involve privilege escalation or dangerous dynamic execution. - [CREDENTIALS_SAFE]: The skill correctly instructs users to store their
SENTISENSE_API_KEYin environment variables or a local configuration file with restricted permissions (mode 600), following security best practices for secret management.
Audit Metadata