stock-master

Pass

Audited by Gen Agent Trust Hub on Mar 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches financial data, market sentiment, and AI-generated news from brief.day1global.xyz. It also retrieves the TradingView Lightweight Charts visualization library from the unpkg.com CDN. These external resources are necessary for the skill's primary function of market analysis.\n- [COMMAND_EXECUTION]: The code utilizes subprocess.Popen to automatically open generated HTML reports in the default system browser on macOS. This is an intended feature to display stock charts immediately after analysis.\n- [DATA_EXFILTRATION]: The skill provides integration with the Feishu/Lark platform, sending analysis results and portfolio data to open.feishu.cn. This is a core feature for enterprise synchronization and is handled via standard API requests using user-provided credentials.\n- [CREDENTIALS_UNSAFE]: API keys and application secrets are managed through local configuration files (config.json, feishu_config.json). The skill's documentation correctly warns users against sharing these files, and no hardcoded secrets were found in the source code.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 2, 2026, 02:22 PM