finance-sentiment
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes the dynamic context injection syntax (!command) in SKILL.md to verify the presence of the ADANOS_API_KEY environment variable using a Python script. This execution occurs at skill load time but performs a benign environment check.
- [EXTERNAL_DOWNLOADS]: The skill uses curl to communicate with api.adanos.org to retrieve sentiment data from Reddit, X.com, news, and Polymarket. These network operations are core to the skill's documented research functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from the Adanos API, which constitutes a potential injection surface. Ingestion points: API responses from api.adanos.org (SKILL.md). Boundary markers: None present. Capability inventory: Shell execution via curl and load-time Python execution (SKILL.md). Sanitization: None present; the skill treats retrieved signals as research data.
Audit Metadata