stock-advisor

Pass

Audited by Gen Agent Trust Hub on Apr 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local Python scripts (scripts/technical_analysis.py, scripts/fundamental_analysis.py, and scripts/html_to_pdf.py) to calculate financial indicators and render reports. These operations are essential to the skill's documented workflow and are performed on locally generated or publicly fetched financial data.- [EXTERNAL_DOWNLOADS]: The skill uses the WebSearch tool to collect market research, industry trends, and news from external sources. This data is used to provide a multi-dimensional analysis of stocks.- [SAFE]: No obfuscation, hidden URLs, or hardcoded credentials were found. The skill uses standard financial analysis libraries (AKShare, pandas) and follows best practices by instructing the user to manage their own investment profile in memory.- [SAFE]: While the skill exhibits an indirect prompt injection surface by ingesting data from WebSearch (ingestion point: Module 3 in SKILL.md) and incorporating it into the advisory board discussion (capability: file-write and lark-doc tool call), this is a functional requirement of the investment analysis workflow and is handled within the agent's standard operational boundaries.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 7, 2026, 12:17 PM