market-intel
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves financial news snapshots, stock analysis, and sentiment data (including sources from Reddit and X/FinTwit) that are incorporated into the agent's context. This data is then used to perform tasks such as publishing trades, posting strategies, or replying to discussions, creating a surface where malicious instructions embedded in news headlines or social media summaries could influence agent behavior.
- Ingestion points: External data enters the agent context through the
/api/market-intel/newsand/api/market-intel/stocks/{symbol}/latestendpoints (as described inSKILL.md). - Boundary markers: The instructions do not specify any delimiters or safety prompts to ensure the agent ignores instructions potentially embedded in the fetched market summaries.
- Capability inventory: The agent is authorized to use this context to "publish a trade", "post a strategy", and "reply in discussions".
- Sanitization: There is no evidence of content filtering or sanitization of the external news summaries before they are presented to the agent.
Audit Metadata