track-agri-hedge-fund-positioning
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches financial datasets from legitimate and authoritative sources, including the CFTC Socrata API (publicreporting.cftc.gov), the Federal Reserve Economic Data (fred.stlouisfed.org), and Yahoo Finance. These are well-known services and do not escalate the security risk.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an ingestion surface as it processes external data from financial APIs. However, the risk is negligible as the data consists of structured numerical and temporal metrics (e.g., contract volumes, price indices) processed via standard libraries like pandas and numpy. The skill does not perform unsafe interpolation of this data into instructions.
- [COMMAND_EXECUTION]: The skill includes Python scripts intended for local execution to perform data analysis and generate visualizations. These scripts use standard file system operations to cache data in Parquet format and output analysis results in JSON or PNG formats, which is consistent with the skill's stated purpose.
Audit Metadata