alphagbm-research-reader
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches financial data and institutional reports from official AlphaGBM API endpoints.\n- [COMMAND_EXECUTION]: Uses a bundled Python runner script to interface with the AlphaGBM backend and process local data comparison tasks.\n- [INDIRECT_PROMPT_INJECTION]: Processes untrusted data from external APIs and local files; however, it includes explicit instructions to treat this data as evidence only and uses strict schema validation to mitigate risks.\n- [DYNAMIC_EXECUTION]: The runner script dynamically loads a bundled local engine script for performing data comparisons.\n- [SAFE]: Implements secure API key management by sourcing credentials from environment variables rather than hardcoding them.
Audit Metadata