convertible-bond-scanner

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill documentation in references/data-queries.md provides instructions for the agent to execute shell commands to activate a Python virtual environment and run specific analysis scripts. This is required for the intended workflow of processing financial market data.
  • [EXTERNAL_DOWNLOADS]: The skill invokes pip install to manage dependencies from a requirements file located in a sibling directory (../findata-toolkit-cn/requirements.txt). This allows the skill to utilize necessary libraries like AKShare from the user's environment.
  • [REMOTE_CODE_EXECUTION]: The skill executes Python code from an external directory structure (../findata-toolkit-cn/scripts/views_runner.py). This code execution is assessed as part of the modular toolkit ecosystem intended by the author for financial data processing.
  • [CREDENTIALS_UNSAFE]: Documentation references the use of an environment variable XUEQIU_TOKEN for API authentication with the Snowball finance platform. No actual credentials or secrets are hardcoded within the skill's source files.
  • [SAFE]: The skill processes external financial data from sources like Eastern Fortune and Snowball. Ingestion points: references/data-queries.md. Boundary markers: Not specified. Capability inventory: Shell and Python execution. Sanitization: Not specified. This is typical for a data analysis agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 03:23 AM