stock-advisor
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts (
scripts/technical_analysis.py,scripts/fundamental_analysis.py, andscripts/html_to_pdf.py) to calculate financial indicators and render reports. These operations are essential to the skill's documented workflow and are performed on locally generated or publicly fetched financial data.- [EXTERNAL_DOWNLOADS]: The skill uses theWebSearchtool to collect market research, industry trends, and news from external sources. This data is used to provide a multi-dimensional analysis of stocks.- [SAFE]: No obfuscation, hidden URLs, or hardcoded credentials were found. The skill uses standard financial analysis libraries (AKShare, pandas) and follows best practices by instructing the user to manage their own investment profile in memory.- [SAFE]: While the skill exhibits an indirect prompt injection surface by ingesting data fromWebSearch(ingestion point: Module 3 inSKILL.md) and incorporating it into the advisory board discussion (capability: file-write andlark-doctool call), this is a functional requirement of the investment analysis workflow and is handled within the agent's standard operational boundaries.
Audit Metadata