longbridge-capital-flow

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/cli.py uses subprocess.run to call a local executable named longbridge. The command construction uses a list of arguments (cmd = [bin_path, sub, symbol, "--format", "json"]) and restricts the symbol input using a strict regular expression (SYMBOL_RE), which prevents command injection. The behavior is documented and matches the skill's purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 06:20 AM