stock-sector-monitoring
Pass
Audited by Gen Agent Trust Hub on Feb 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or persistence mechanisms were detected. The skill's behavior aligns with its documented purpose of financial data monitoring.- [EXTERNAL_DOWNLOADS]: The skill fetches financial data from Tushare, a well-known technology provider for market data. These network operations are limited to authenticated API requests for structured financial information.- [COMMAND_EXECUTION]: The script uses
os.systemto clear the terminal screen (clsorclear) during the continuous monitoring loop to maintain a clean user interface. This is a standard and safe implementation for CLI tools.- [CREDENTIALS_UNSAFE]: The skill correctly handles the Tushare API token by reading it from environment variables or a local configuration file, avoiding the risk of hardcoded secrets.- [PROMPT_INJECTION]: The skill definition inSKILL.mdcontains standard operational instructions without any attempts to bypass safety filters or override system-level agent constraints.
Audit Metadata