skills/hkuds/vibe-trading/chanlun/Gen Agent Trust Hub

chanlun

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The example script fetches market candle data from OKX's public API (https://www.okx.com/api/v5/market/candles). OKX is a well-known cryptocurrency exchange, and the operation is used to retrieve historical price data for analysis.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (market candles) from the OKX API.
  • Ingestion points: Data enters the system via requests.get in example_signal_engine.py and is converted into RawBar objects.
  • Boundary markers: None specific, but the data is strictly parsed into numerical types (float, int, datetime).
  • Capability inventory: The skill uses pandas and czsc for numerical processing and requests for data fetching.
  • Sanitization: The script casts API response fields to specific types (e.g., float(), pd.to_datetime()), which prevents most forms of injection from being interpreted as code or instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 06:26 PM
Security Audit — agent-trust-hub — chanlun