stock-sentiment

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill mentions and provides examples using npx -y sentisense@0.47.1, which downloads and executes the SentiSense CLI from the official npm registry. The version is pinned to a specific, reviewed version.
  • [COMMAND_EXECUTION]: The skill uses the agent's terminal to execute curl and python commands for interacting with the SentiSense API. These are standard operations for a data-fetching skill.
  • [SAFE]: All network operations are targeted at the vendor's official domain (app.sentisense.ai) and use GET requests for read-only data retrieval. No write operations, trading capabilities, or sensitive file access patterns were detected. The Python client (scripts/sentiment_client.py) uses the standard library and implements proper error handling and environment variable usage for secrets management.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 04:26 AM
Security Audit — agent-trust-hub — stock-sentiment