finviz-screener

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/open_finviz_screener.py uses subprocess.run() to open Google Chrome or the system default browser via system commands (open on macOS, google-chrome/chromium-browser/xdg-open on Linux). This behavior is benign as it is the core mechanism needed to accomplish the skill's purpose (opening the stock screener in a browser). Tight regular expressions (_TOKEN_RE, _SLUG_RE, _ORDER_RE) sanitize inputs and enforce strict token matching before anything is placed in a shell context or the URL parameters.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 07:40 PM
Security Audit — agent-trust-hub — finviz-screener