stockbee-setup-fluency-trainer

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a standard financial analysis tool with no detected malicious patterns. It strictly follows its stated purpose of building a 'model book' for trading research.\n- [EXTERNAL_DOWNLOADS]: The skill downloads historical price data from Financial Modeling Prep (financialmodelingprep.com), which is a well-known financial data provider. This is documented and required for its outcome-tracking functionality. It uses standard API keys and session headers.\n- [DATA_EXPOSURE]: The skill reads and writes to local project directories (state/stockbee/, reports/). It does not access sensitive system paths or credentials outside of the user-provided FMP API key.\n- [INDIRECT_PROMPT_INJECTION]: While the skill ingests external screener JSON reports, it processes them as structured data with specific key extraction and normalization (e.g., normalize_symbol, to_float). It does not dynamically execute instructions contained within the data.\n- [DYNAMIC_EXECUTION]: No evidence of eval(), exec(), or dynamic code generation from untrusted sources. The script uses standard argparse and json libraries for operation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 05:41 PM
Security Audit — agent-trust-hub — stockbee-setup-fluency-trainer