stock-watchlist
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues detected. The skill uses standard environment variables for API key management and relies on a local JSON file for data persistence.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an ingestion surface for untrusted data from an external source. 1. Ingestion points: Market data and signals are fetched from api.aisa.one (SKILL.md). 2. Boundary markers: Absent in prompt interpolation instructions. 3. Capability inventory: Executes local scripts via python3 and performs local file writes to watchlist.json (SKILL.md). 4. Sanitization: No explicit sanitization or validation logic is defined in the documentation for the external API response.
Audit Metadata