volatility-modeling

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DATA_EXFILTRATION]: The skill communicates with public-api.birdeye.so to retrieve OHLCV (Open, High, Low, Close, Volume) market data. Birdeye is a widely recognized service for Solana and crypto market data. These network operations are limited to fetching public financial data necessary for volatility analysis and do not transmit sensitive user information or local files.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from the Birdeye API, which represents a potential attack surface. 1. Ingestion points: Data is loaded in scripts/estimate_volatility.py and scripts/vol_forecast.py using HTTP requests. 2. Boundary markers: No specific delimiters are used in the prompt for this data. 3. Capability inventory: The skill's functionality is confined to mathematical analysis and diagnostic output; it lacks dangerous capabilities such as file system writes, shell command execution, or network exfiltration of local data. 4. Sanitization: All external data values are explicitly cast to floating-point numbers during processing, which effectively neutralizes potential prompt injection strings.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 07:55 PM