twap-vwap-pov-execution
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues detected. The skill performs local data analysis on financial execution records using standard Python libraries.
- [COMMAND_EXECUTION]: The skill executes a local Python script (
scripts/twap_vwap_pov_execution_diagnostics.py) to process input data. This is a core part of the skill's intended functionality and occurs within the local environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from an external CSV file to generate diagnostics.
- Ingestion points: The
scripts/twap_vwap_pov_execution_diagnostics.pyscript reads a user-providedinput.csvfile. - Boundary markers: Data ingestion is delimited by the CSV file format and a strictly defined column schema.
- Capability inventory: The skill performs local file read/write operations and numeric analysis via Pandas; the agent then consumes the summarized JSON output.
- Sanitization: The script uses
pd.to_numericwitherrors='coerce'on expected data columns, ensuring that only numeric values are used in calculations and effectively ignoring any injected text instructions.
Audit Metadata