wyckoff-trading

Pass

Audited by Gen Agent Trust Hub on Aug 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the baostock and akshare Python libraries, which are widely recognized tools for accessing Chinese financial market data.
  • [COMMAND_EXECUTION]: The skill provides Python scripts (e.g., scripts/data_api.py) designed to compute technical signals like Spring, JAC, and SOS from stock price data. These scripts are relevant to the skill's stated purpose.
  • [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection due to its ingestion of external market data.
  • Ingestion points: Market data is retrieved through API calls in SKILL.md (Baostock) and scripts/data_api.py (Akshare).
  • Boundary markers: No delimiters or specific instructions were found to prevent the agent from interpreting text-based data from the API as commands.
  • Capability inventory: The skill executes analysis scripts and performs network operations to fetch financial data.
  • Sanitization: While numerical data is cast to specific types, text fields such as stock names are not sanitized for potential prompt injection content.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 8, 2026, 05:25 PM