wyckoff-trading
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
baostockandaksharePython libraries, which are widely recognized tools for accessing Chinese financial market data. - [COMMAND_EXECUTION]: The skill provides Python scripts (e.g.,
scripts/data_api.py) designed to compute technical signals like Spring, JAC, and SOS from stock price data. These scripts are relevant to the skill's stated purpose. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection due to its ingestion of external market data.
- Ingestion points: Market data is retrieved through API calls in
SKILL.md(Baostock) andscripts/data_api.py(Akshare). - Boundary markers: No delimiters or specific instructions were found to prevent the agent from interpreting text-based data from the API as commands.
- Capability inventory: The skill executes analysis scripts and performs network operations to fetch financial data.
- Sanitization: While numerical data is cast to specific types, text fields such as stock names are not sanitized for potential prompt injection content.
Audit Metadata