stock-price-checker
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOWEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS] (LOW): Dependency on 'yfinance' package from PyPI.
- [COMMAND_EXECUTION] (LOW): Executes 'stock-price.py' with user-supplied stock symbols. The script source is not provided, preventing verification of input sanitization or shell safety.
- [PROMPT_INJECTION] (LOW): Ingests data from Yahoo Finance, creating an Indirect Prompt Injection surface. 1. Ingestion point: Yahoo Finance via yfinance. 2. Boundary markers: Absent. 3. Capability inventory: Retrieval and display of stock data. 4. Sanitization: Unknown.
Audit Metadata