northbound-flow-analyzer
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute local Python scripts (
views_runner.py) within a virtual environment. This execution is limited to a local sibling directory containing a financial toolkit, which is a standard pattern for modular AI agent skills and does not pose a security risk in this context.\n- [CREDENTIALS_UNSAFE]: The documentation mentions the optional use of an environment variable (XUEQIU_TOKEN) for API authentication. This method adheres to security best practices by encouraging external secret management instead of hardcoding credentials within the skill files.\n- [EXTERNAL_DOWNLOADS]: The environment setup involves installing Python dependencies from a local requirements file via pip. This is a standard and transparent procedure for managing project-specific software requirements and does not involve downloading untrusted remote payloads.
Audit Metadata