weex-analysis-skill

Pass

Audited by Gen Agent Trust Hub on May 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a legitimate tool for analyzing financial data from the WEEX platform. It operates strictly in a read-only mode, as outlined in its security policy.
  • [COMMAND_EXECUTION]: The test files (test_weex_analysis_cli.py and test_weex_analysis_prepare.py) use subprocess.run to invoke the bundled Python CLI tools using the current Python executable. This is used solely for automated testing of the analysis logic and does not pose a threat during normal operation as it does not incorporate unsanitized user input into the shell commands.
  • [DATA_EXPOSURE]: The skill processes structured JSON input provided via files or standard input. It does not attempt to access sensitive system files, environment variables, or hardcoded credentials. It follows best practices by requiring users to normalize data before analysis.
  • [PROMPT_INJECTION]: The instructions in SKILL.md and README.md establish clear safety guidelines and behavioral constraints, such as the enforcement of a mandatory disclaimer, without attempting to bypass the underlying AI agent's safety protocols.
Audit Metadata
Risk Level
SAFE
Analyzed
May 10, 2026, 09:28 PM
Security Audit — agent-trust-hub — weex-analysis-skill