detect-atr-squeeze-regime

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external market data, creating an ingestion point where untrusted content could enter the agent context. 1. Ingestion points: scripts/atr_squeeze.py fetches OHLCV data from the Yahoo Finance API using yfinance. 2. Boundary markers: The skill does not implement specific delimiters for external content. 3. Capability inventory: Fetching data, calculating technical indicators, and generating reports. 4. Sanitization: Market data is coerced into numerical types for calculation.
  • [EXTERNAL_DOWNLOADS]: The skill downloads market data from Yahoo Finance and Stooq, which are recognized well-known services for financial information.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 10:33 PM