arbitrage-opportunity-finder

Pass

Audited by Gen Agent Trust Hub on Apr 18, 2026

Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
  • [PROMPT_INJECTION]: The 'Multi-Source Scrapping' workflow described in the skill establishes an indirect prompt injection surface.
  • Ingestion points: Data is scraped from external sites such as Amazon, eBay, and crypto exchanges (SKILL.md).
  • Boundary markers: Absent; the logic does not specify the use of delimiters or instructions to ignore embedded commands in the scraped content.
  • Capability inventory: The described workflow relies on the agent's core capabilities for web browsing and data analysis to execute the price comparison.
  • Sanitization: Absent; the skill does not mention validation, filtering, or escaping of the retrieved external content.
  • [NO_CODE]: This skill consists entirely of instructional markdown and does not include any scripts, binaries, or command-line execution patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 18, 2026, 05:56 PM
Security Audit — agent-trust-hub — arbitrage-opportunity-finder