gzh-astock-top
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices by instructing the user to store API keys in an environment variable (
DOUBAOYA_API_KEY) rather than hardcoding them. - [SAFE]: The Python script
fetch_astock_top.pyuses the standard libraryurllibto perform network operations solely to the vendor's domaindoubaoya.comfor its intended purpose of fetching account data. - [SAFE]: No obfuscation, persistence mechanisms, or unauthorized command executions were found. The tool provides clear documentation on error handling and data flow.
Audit Metadata