canslim-screener
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches financial data and company metrics from established and well-known services (financialmodelingprep.com and finviz.com). These operations are essential for the tool's primary purpose and use official APIs or public stock pages.
- [COMMAND_EXECUTION]: The workflow requires executing local Python scripts to process financial data and generate performance reports. These actions are standard for the skill's intended use case and are initiated by the user.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests external stock market data which represents a theoretical attack surface, the scripts strictly parse this data as numerical values for calculation. This prevents untrusted external content from influencing the agent's internal logic or instructions.
- [CREDENTIALS_SAFE]: The skill correctly implements secure credential management by directing users to store sensitive API keys in environment variables rather than hardcoding them into scripts or configuration files.
Audit Metadata