convertible-bond-scanner
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation in
references/data-queries.mdprovides instructions for the agent to execute shell commands to activate a Python virtual environment and run specific analysis scripts. This is required for the intended workflow of processing financial market data. - [EXTERNAL_DOWNLOADS]: The skill invokes
pip installto manage dependencies from a requirements file located in a sibling directory (../findata-toolkit-cn/requirements.txt). This allows the skill to utilize necessary libraries like AKShare from the user's environment. - [REMOTE_CODE_EXECUTION]: The skill executes Python code from an external directory structure (
../findata-toolkit-cn/scripts/views_runner.py). This code execution is assessed as part of the modular toolkit ecosystem intended by the author for financial data processing. - [CREDENTIALS_UNSAFE]: Documentation references the use of an environment variable
XUEQIU_TOKENfor API authentication with the Snowball finance platform. No actual credentials or secrets are hardcoded within the skill's source files. - [SAFE]: The skill processes external financial data from sources like Eastern Fortune and Snowball. Ingestion points:
references/data-queries.md. Boundary markers: Not specified. Capability inventory: Shell and Python execution. Sanitization: Not specified. This is typical for a data analysis agent.
Audit Metadata