sxsc-tushare-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates entirely within its stated scope of financial data analysis and reporting.
- [SAFE]: The data retrieval layer in
scripts/data_api.pyuses standard environment variables for authentication and communicates with contextually appropriate endpoints (Tushare proxy) and well-known CDNs (jsDelivr for ECharts). - [SAFE]: The HTML report generation in
scripts/report_html.pyimplements robust security practices, including HTML entity escaping and specialized JSON serialization for inline scripts to prevent cross-site scripting (XSS) or data injection. - [SAFE]: Local file operations are restricted to saving the generated analysis reports as HTML files in the current working directory, which is a core functional requirement of the skill.
Audit Metadata