us-stock
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill specifies 'yfinance' as a dependency in its installation metadata. This is a well-known and standard library for accessing financial data from Yahoo Finance.
- [COMMAND_EXECUTION]: The skill uses 'importlib.util' to dynamically load and execute functions from a local workspace file at '/data/workspace/skills/twelvedata/exports.py'. This is a design pattern for inter-skill communication within the agent environment and targets a known local path.
- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection via news data. 1. Ingestion point: 'get_news' function in 'exports.py' fetches news from Yahoo Finance. 2. Boundary markers: None present. 3. Capability inventory: No file-write, network, or subprocess operations are present in the skill's logic. 4. Sanitization: None performed. Given the limited scope of the skill, this is considered a low-risk surface.
Audit Metadata