edge-hint-extractor
Warn
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/build_hints.pyimplements a feature that allows the execution of arbitrary shell commands provided through the--llm-ideas-cmdargument. This usessubprocess.runon a command string parsed byshlex.split, enabling the execution of any local binary accessible to the environment.\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests untrusted market data and news reactions from external files which are then structured for downstream LLM synthesis.\n - Ingestion points: Data enters the system through
read_market_summary,read_anomalies, andread_news_reactionsinscripts/build_hints.py.\n - Boundary markers: The skill does not implement explicit boundary markers or instructions to ignore embedded commands within the ingested content.\n
- Capability inventory: The skill has the capability to write files and execute external subprocesses via the
--llm-ideas-cmdhook.\n - Sanitization: No content-based sanitization or filtering is applied to the ingested data values before they are used in hint generation.
Audit Metadata