aj-stock-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches market news from well-known services including Google News RSS, Bing News RSS, and the Brave Search API.
- [EXTERNAL_DOWNLOADS]: Installs established data analysis libraries (pandas, numpy, tushare) from the official Python Package Index (PyPI).
- [COMMAND_EXECUTION]: Runs local Python scripts to process financial data and generate investment reports as part of its core workflow.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external news sources and financial APIs which are interpolated into Markdown report templates. 1. Ingestion points: news items in scripts/news_fetcher.py and financial data in scripts/data_fetcher.py. 2. Boundary markers: absent from reporting templates. 3. Capability inventory: shell script execution, file writing, and network operations to financial data providers. 4. Sanitization: absent in the scripts/financial_analyzer.py template engine.
Audit Metadata