clearinghouse-posttrade
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external CSV files, creating an indirect prompt injection surface.\n
- Ingestion points: The script
scripts/clearinghouse_posttrade_diagnostics.pyreads data usingpd.read_csv.\n - Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore embedded instructions in the script output.\n
- Capability inventory: The skill has the capability to write diagnostic results to a local file via the
--outputflag.\n - Sanitization: The script employs
pd.to_numericandpd.to_datetimewitherrors='coerce', which sanitizes the input by ensuring only numerical and date data are included in the summary passed to the agent.\n- [EXTERNAL_DOWNLOADS]: The scriptscripts/clearinghouse_posttrade_diagnostics.pydepends on thepandaslibrary, which is a widely used and trusted package for data analysis.
Audit Metadata