sentiment-analyst
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is configured to connect to an external MCP server hosted at datahub.noxiaohao.com to provide the market and sentiment data tools.
- [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection.
- Ingestion points: Untrusted social media content is retrieved via the reddit_trending tool action in SKILL.md.
- Boundary markers: The instructions do not specify any delimiters or safety guidelines for the agent to isolate external content.
- Capability inventory: The skill is restricted to data retrieval tools and does not have access to higher-privilege capabilities such as file system writing or command execution.
- Sanitization: No sanitization or validation of the external social media strings is described in the skill instructions.
Audit Metadata