alphagbm-vol-smile
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard API integration for financial analysis. It defines a GET request to a vendor-owned domain (alphagbm.zeabur.app) to retrieve volatility data based on user-provided ticker symbols.
- [INDIRECT_PROMPT_INJECTION]: The skill takes user input (ticker symbols and expiration dates) to construct API requests. While this represents a standard data ingestion surface, there is no evidence of unsafe interpolation or instructions that could be used to bypass safety filters.
- [DATA_EXPOSURE_&_EXFILTRATION]: The skill correctly instructs users to manage their API keys via environment variables (ALPHAGBM_API_KEY), which is a recommended security practice. No hardcoded credentials or sensitive local file access patterns were found.
Audit Metadata