alphagbm-stock-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests AI-generated narrative reports from the external AlphaGBM API, which could potentially contain malicious instructions intended to influence the agent's behavior.
- Ingestion points: The
reportfield returned by the/api/stock/analyze-syncand condensed analysis from/api/stock/summary/<TICKER>endpoints documented inSKILL.md. - Boundary markers: None identified; external content is processed directly to extract key excerpts.
- Capability inventory: Performs HTTP network requests (curl) and parses markdown content for user presentation.
- Sanitization: No evidence of content sanitization or validation is provided for the AI-generated text received from the API.
- [EXTERNAL_DOWNLOADS]: The skill performs network operations to
https://alphagbm.zeabur.appandhttps://alphagbm.comto fetch market data, stock analysis, and handle user authentication. - [COMMAND_EXECUTION]: The skill utilizes shell-based HTTP requests (demonstrated via
curlexamples) to communicate with the AlphaGBM backend for real-time stock quotes and full analysis tasks.
Audit Metadata