valuation
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs stock valuation using the well-known Tushare financial API. It follows security best practices by using environment variables for API tokens and does not exhibit any malicious patterns such as data exfiltration, obfuscation, or unauthorized command execution.
- [EXTERNAL_DOWNLOADS]: The skill relies on the tushare library to fetch financial data from Tushare's official servers. This is standard behavior for financial analysis tools and does not constitute a security risk.
- [COMMAND_EXECUTION]: The skill uses the Bash(python:*) tool to execute its internal script for calculations. The execution is limited to the provided script and handles inputs as arguments rather than shell-concatenated strings, reducing command injection risks.
Audit Metadata