smart-order-routing
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions and scripts are focused on quantitative financial analysis and diagnostics. The Python script performs deterministic statistical summaries and does not exhibit any suspicious network behavior or privilege escalation attempts.- [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface through the processing of external CSV files. 1. Ingestion points: The
scripts/smart_order_routing_diagnostics.pyscript reads user-provided trade data from aninput.csvfile. 2. Boundary markers: There are no explicit instructions or delimiters for the agent when interpreting the resulting diagnostic JSON summary. 3. Capability inventory: The script is limited to local file system read and write operations for processing and storing diagnostic artifacts. 4. Sanitization: The script employs strong input validation by coercing data into numeric and datetime types before analysis, which effectively neutralizes the risk of embedded prompt instructions in the processed data.
Audit Metadata