xvary-stock-research
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves financial data from the official SEC EDGAR database (
sec.gov) and well-known financial services including Yahoo Finance, Finviz, and Stooq. These operations are essential to the skill's stock research functionality and target reputable domains. - [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it processes data from external web sources.
- Ingestion points: Data is fetched by scripts
tools/edgar.pyandtools/market.py. - Boundary markers: The instructions do not define explicit boundary markers for the external content.
- Capability inventory: The tools are limited to HTTP GET requests for data retrieval.
- Sanitization: Risk is mitigated through the use of structured data extraction (XBRL concepts) and strict numerical type conversion, which prevents the interpretation of external text as executable instructions.
Audit Metadata