stock-analysis
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches financial data and news alerts from well-known services including Yahoo Finance and Google News RSS.
- [COMMAND_EXECUTION]: Uses the 'uv run' command to execute local Python scripts for stock analysis and portfolio management. These scripts are internal to the skill's directory.
- [DATA_EXPOSURE]: Stores user portfolio data in a local JSON file at a designated application path. This is a standard practice for local data persistence and does not involve accessing sensitive system credentials or configurations.
- [PROMPT_INJECTION]: Ingests external news headlines from RSS feeds to provide sentiment alerts. While this represents a potential indirect prompt injection surface, the risk is mitigated by the skill's described use of keyword-based scoring and the absence of instructions that would execute untrusted text as commands.
Audit Metadata