desk-strategy-lab
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external trading claims from potentially untrusted sources such as URLs, video content, or repository indicators to formulate strategy rules.
- Ingestion points: The 'When the idea comes from outside' section in
SKILL.mddetails how the strategist imports external claims into the agent's context. - Boundary markers: The process requires a mandatory 'Interview' phase and the creation of a
RULES.mdfile to freeze definitions, which acts as a structured boundary between external data and code execution. - Capability inventory: The agent generates Python scripts (
backtest.py) and proposes trades to other bots (e.g., Execution Trader). - Sanitization: The methodology requires manual review and explicit agreement on all parameters before proceeding to code.
- [DYNAMIC_EXECUTION]: The workflow involves the agent dynamically generating a
backtest.pyscript based on the user's strategy rules. - Evidence:
SKILL.mdinstructs the strategist to write a 'readable, single-file backtest' and execute it against historical market data. - Context: This is a core function of the strategist role and is constrained to a specific workspace (
/workspace/trading-desk/strategies/) using standard templates. - [SAFE]: The skill incorporates significant security best practices, including a strict 'Never' list that prohibits live order execution, mandates testnet for paper trading, and requires human approval for all trade proposals.
Audit Metadata