desk-post-trade-review
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides structured instructions for trade journaling, post-trade analysis, and incident reporting. No malicious code, command execution, or unauthorized network patterns were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow that ingests data from exchange records (fills, orders, funding) and local journal files. 1. Ingestion points: Exchange records and journal files (/workspace/trading-desk/journal/). 2. Boundary markers: None specified in the workflow instructions. 3. Capability inventory: Writing to the workspace and sending direct messages to desk leads. 4. Sanitization: None specified for external record processing. The vulnerability surface is limited to structured trade data processed for review purposes.
Audit Metadata