smart-order-routing

Pass

Audited by Gen Agent Trust Hub on Sep 3, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill instructions and scripts are focused on quantitative financial analysis and diagnostics. The Python script performs deterministic statistical summaries and does not exhibit any suspicious network behavior or privilege escalation attempts.- [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface through the processing of external CSV files. 1. Ingestion points: The scripts/smart_order_routing_diagnostics.py script reads user-provided trade data from an input.csv file. 2. Boundary markers: There are no explicit instructions or delimiters for the agent when interpreting the resulting diagnostic JSON summary. 3. Capability inventory: The script is limited to local file system read and write operations for processing and storing diagnostic artifacts. 4. Sanitization: The script employs strong input validation by coercing data into numeric and datetime types before analysis, which effectively neutralizes the risk of embedded prompt instructions in the processed data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 3, 2026, 08:46 AM
Security Audit — agent-trust-hub — smart-order-routing