dip-scanner

Pass

Audited by Gen Agent Trust Hub on Aug 20, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Retrieves financial market data, sentiment indices, and funding rates from well-known providers including Yahoo Finance, alternative.me, OKX, and dYdX.
  • [COMMAND_EXECUTION]: Utilizes the yfinance library for automated retrieval of asset price history and intraday metrics.
  • [PROMPT_INJECTION]: The skill processes data from external APIs to generate alerts, which represents an indirect injection surface.
  • Ingestion points: Market data and sentiment JSON responses fetched in dip_scanner.py.
  • Boundary markers: Data is treated as numeric or structured input; alerts are based on defined conviction thresholds.
  • Capability inventory: Local file system writes to a .cache directory are used for persistent alert logging.
  • Sanitization: Employs standard parsing of structured JSON responses from trusted financial APIs.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 20, 2026, 02:21 PM
Security Audit — agent-trust-hub — dip-scanner