lithium-supply-demand-gap-radar
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches commodity data and economic reports from official government and specialized industry sources including the USGS, IEA, Australian Department of Industry, and Global X ETFs. These references are used for fundamental analysis of the lithium market.
- [COMMAND_EXECUTION]: The skill utilizes Python scripts to implement a data pipeline. This includes statistical modeling (rolling beta, linear regression) and high-resolution chart generation using
matplotlibto produce PNG files in a localoutput/directory. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data scraped from HTML and PDF sources. The analysis identifies this as a potential surface, but notes it is mitigated through numeric parsing and structured data normalization, which prevents raw text from being interpreted as instructions.
- [DATA_EXFILTRATION]: Network operations are restricted to defined data ingestion points for economic research. No access to sensitive local files (e.g., SSH keys, credentials) or subsequent exfiltration was found.
- [SAFE]: The skill's architecture follows a least-privilege model for financial analysis, using standard Python libraries and targeting well-known, reputable data providers.
Audit Metadata