trade
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script (
scripts/fetch_market_data.py) to fetch current market prices for trade validation. This script is located within the project's internal directory structure. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from user input (trade reasons) and local files (
股市信息/Daily/). While it lacks explicit instruction-boundary markers, it mitigates risk through numerical validation of prices against fetched data. The skill possesses capabilities for subprocess execution and file modification across several portfolio configuration files.
Audit Metadata