margin-management
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes financial data retrieved from the SnapTrade API and local CSV files to generate recommendations and alerts.
- Ingestion points: External data is ingested through the SnapTrade integration and legacy CSV files processed in SKILL.md.
- Boundary markers: The instructions do not define specific boundaries or markers to isolate ingested financial data from the prompt context.
- Capability inventory: The skill possesses the ability to execute shell commands via uv run and sqlite3, and performs file system reads.
- Sanitization: Data processing is deferred to external scripts, with no explicit sanitization described in the skill instructions.
- [COMMAND_EXECUTION]: The skill requires the execution of shell commands to synchronize account data and query the local database.
- Evidence: uv run python -m src.integrations.snaptrade.sync_db and sqlite3 family_office.db are explicitly instructed for data management.
- [DYNAMIC_EXECUTION]: The instructions include a Python script snippet for calculating the duration of the margin strategy at runtime.
- Evidence: A script using os.getenv and datetime.now is provided in the Scaling Alerts section to derive months elapsed since the strategy start date.
Audit Metadata