trade-journal
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill utilizes a dedicated tool,
analyze_trade_journal, to process sensitive financial data. This design pattern ensures that untrusted user input is handled by a specialized parser rather than being directly interpreted by the agent's logic or executed in a shell environment.\n- [SAFE]: The instructions contain explicit security constraints, specifically warning the agent: 'Call the analyze_trade_journal tool directly. Never run Python from bash.' This mitigates the risk of command injection or unauthorized code execution.\n- [PROMPT_INJECTION]: An assessment of the indirect prompt injection attack surface was performed regarding the processing of external trade journals. \n - Ingestion points: User-provided CSV/Excel files (broker exports) are processed via the
file_pathparameter inSKILL.md.\n - Boundary markers: The system uses a tool-based interface that returns structured JSON data, providing a layer of isolation between the raw data and the agent's reasoning process.\n
- Capability inventory: The skill is limited to reading data and generating a markdown report; it lacks network access or file-writing capabilities that could be exploited.\n
- Sanitization: The tool parses data according to strict predefined schemas for supported brokers (Tonghuashun, Eastmoney, Futu), effectively filtering out non-trade data content.\n- [NO_CODE]: The skill consists entirely of markdown documentation and tool definitions. No external scripts, dependencies, or executable code are included in the skill package.
Audit Metadata