us-cpi-pce-comparator
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves economic datasets from the Federal Reserve Bank of St. Louis (FRED) and the Bureau of Labor Statistics (BLS) through their official public interfaces. These are well-known institutional data providers.
- [COMMAND_EXECUTION]: The workflow involves executing local Python scripts to calculate inflation rates and compare divergence between indices.
- [INDIRECT_PROMPT_INJECTION]: The ingestion of data from external APIs represents an indirect prompt injection surface. 1. Ingestion points: Economic data is retrieved in
scripts/fetch_fred_data.pyandscripts/fetch_bls_data.py. 2. Boundary markers: The skill does not employ explicit boundary markers or safety warnings to isolate external data from the instruction stream. 3. Capability inventory: The skill possesses network access via therequestslibrary and the ability to write analysis results to the local filesystem. 4. Sanitization: The skill uses thepandaslibrary to parse data as numeric types, which helps validate incoming information and reduces the risk of text-based instruction injection.
Audit Metadata