stock-analyzer

Pass

Audited by Gen Agent Trust Hub on Apr 21, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses os.system('chcp 65001 > nul') in generate_report.py and tests/test_full_comparison.py. This is a standard command to set the Windows console encoding to UTF-8, ensuring correct display of Traditional Chinese characters in the terminal. This operation is benign and poses no security threat.
  • [EXTERNAL_DOWNLOADS]: The StockAnalyzer class in scripts/main.py fetches financial data from Yahoo Finance using the yfinance library. Yahoo Finance is a well-known service, and downloading this data is a core requirement for the tool's functionality.
  • [PROMPT_INJECTION]: The skill's activation configuration in SKILL.md and SKILL_zh-TW.md is strictly focused on stock analysis queries. No instructions were found that attempt to bypass safety filters or extract system prompts.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 21, 2026, 10:55 PM