theme-detector
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill retrieves financial data from well-known services (FINVIZ, Financial Modeling Prep) and the author's public repository. All data fetching operations use standard HTTPS protocols and target established domains relevant to the skill's purpose. The use of the author's repository for dashboard data is consistent with the vendor resource context.\n- [SAFE]: Sensitive information such as API keys is securely managed using environment variables (FINVIZ_API_KEY, FMP_API_KEY), ensuring that no credentials are hardcoded within the skill's code or configuration files.\n- [SAFE]: Data ingestion processes include strict parsing and numerical validation, providing a safeguard against potential indirect injection through data fields. For example, performance data is converted to floats and winsorized to handle outliers, and industry names are processed as simple strings for reporting.\n- [SAFE]: No malicious patterns such as prompt injection, obfuscation, unauthorized privilege escalation, persistence mechanisms, or dynamic shell context injection were detected in the skill's instructions or scripts.
Audit Metadata