dividend-tracking
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands to synchronize transaction records and query the database.
- Evidence: Use of
uv run python -m src.integrations.snaptrade.sync_transactions_dbto fetch external data. - Evidence: Multiple
sqlite3command invocations to read fromfamily_office.db. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external financial sources into its analysis context, creating a potential vector for instructions embedded in data.
- Ingestion points: The
transactionstable infamily_office.dbis populated from the SnapTrade API. - Boundary markers: None; the skill lacks delimiters or instructions to ignore embedded commands in the transaction descriptions.
- Capability inventory: The skill possesses file-read access and subprocess execution capabilities (
uv,sqlite3). - Sanitization: No validation or escaping is applied to the database records before they are processed by the agent.
Audit Metadata