alphagbm-stock-analysis

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests AI-generated narrative reports from the external AlphaGBM API, which could potentially contain malicious instructions intended to influence the agent's behavior.
  • Ingestion points: The report field returned by the /api/stock/analyze-sync and condensed analysis from /api/stock/summary/<TICKER> endpoints documented in SKILL.md.
  • Boundary markers: None identified; external content is processed directly to extract key excerpts.
  • Capability inventory: Performs HTTP network requests (curl) and parses markdown content for user presentation.
  • Sanitization: No evidence of content sanitization or validation is provided for the AI-generated text received from the API.
  • [EXTERNAL_DOWNLOADS]: The skill performs network operations to https://alphagbm.zeabur.app and https://alphagbm.com to fetch market data, stock analysis, and handle user authentication.
  • [COMMAND_EXECUTION]: The skill utilizes shell-based HTTP requests (demonstrated via curl examples) to communicate with the AlphaGBM backend for real-time stock quotes and full analysis tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 04:00 PM
Security Audit — agent-trust-hub — alphagbm-stock-analysis