futu-unusual-technical-signal-alerts
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to interact with the futu CLI to detect technical unusual signals for stocks.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided stock targets and time ranges that are interpolated into CLI commands.
- Ingestion points: User input is parsed for stock_target and time_range in the SKILL.md workflow.
- Boundary markers: While explicit delimiters are not mentioned for the bash interpolation, the workflow mandates a strict normalization process.
- Capability inventory: The skill uses the Bash tool to execute system commands using the futu CLI bin.
- Sanitization: The skill enforces input sanitization by requiring the agent to normalize stock targets into standard symbol formats (e.g., US.NVDA) via a mapping table and to convert time range descriptions into integers, significantly mitigating command injection risks.
Audit Metadata