open-outcry-hybrid-price-discovery

Pass

Audited by Gen Agent Trust Hub on Sep 3, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill's components are dedicated to financial data analysis and diagnostic reporting. No patterns associated with prompt injection, obfuscation, or data exfiltration were found in the instructions, metadata, or scripts.
  • [INDIRECT_PROMPT_INJECTION]: The skill contains a data ingestion surface where it reads and processes user-provided CSV files.
  • Ingestion points: The file input.csv is read by scripts/open_outcry_hybrid_price_discovery_diagnostics.py using the Pandas library.
  • Boundary markers: The script produces a structured JSON artifact, which serves as a boundary between the raw data and the agent's interpretation.
  • Capability inventory: The Python script is limited to local file system read/write operations and mathematical data processing; it lacks network access or system-level execution capabilities.
  • Sanitization: The script employs pd.to_numeric with error coercion and dropna to filter and validate incoming data fields before analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 3, 2026, 08:45 AM
Security Audit — agent-trust-hub — open-outcry-hybrid-price-discovery