rq-sector-overview
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
rqdataCLI and a report renderer using Python'ssubprocessmodule. These executions use structured argument lists, which is a secure implementation that prevents shell injection vulnerabilities.\n- [EXTERNAL_DOWNLOADS]: The skill retrieves financial datasets from the vendor's services using an official CLI tool. This is the intended functionality and does not involve downloading untrusted scripts or executables.\n- [SAFE]: Analysis of the Python scripts and instructions revealed no malicious patterns, obfuscation, or unauthorized access to sensitive files. The skill correctly validates external web search data before including it in reports.
Audit Metadata