stock-analyzer
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches and processes stock news and company announcements from external web sources, which serves as a potential surface for indirect prompt injection if the source content contains hidden instructions.
- Ingestion points: Ingests external data from
eastmoney.comsearch results, news pages, and company announcements as documented inSKILL.md(Step 4, 6.5) and implemented inscripts/fetch_stock.py. - Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the skill when processing external financial data.
- Capability inventory: The skill possesses the ability to execute a local Python script (
scripts/fetch_stock.py), perform web searches viaweb_search, and save reports to the workspace usingwrite_to_file. - Sanitization: No specific sanitization, filtering, or validation of the external web content is performed before the agent processes it.
Audit Metadata