chanlun
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The example script fetches market candle data from OKX's public API (
https://www.okx.com/api/v5/market/candles). OKX is a well-known cryptocurrency exchange, and the operation is used to retrieve historical price data for analysis. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (market candles) from the OKX API.
- Ingestion points: Data enters the system via
requests.getinexample_signal_engine.pyand is converted intoRawBarobjects. - Boundary markers: None specific, but the data is strictly parsed into numerical types (float, int, datetime).
- Capability inventory: The skill uses
pandasandczscfor numerical processing andrequestsfor data fetching. - Sanitization: The script casts API response fields to specific types (e.g.,
float(),pd.to_datetime()), which prevents most forms of injection from being interpreted as code or instructions.
Audit Metadata