whale-hunting
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches real-time financial data from Yahoo Finance and the Massive API. These are established financial data providers and the data access is essential for the skill's primary function of detecting 'whale' trades.
- [COMMAND_EXECUTION]: The skill requires the execution of a local script, whale_hunting.py, to process and aggregate the data. This is a standard operation for financial analysis tools and no suspicious command injection patterns were found in the script logic.
- [CREDENTIALS_UNSAFE]: The skill correctly handles sensitive credentials by requiring the user to set the MASSIVE_API_KEY environment variable. This avoids the security risk of hardcoding API keys directly in the script or instructions.
Audit Metadata