aifi-daily-report
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions specify the execution of a local shell script,
bash scripts/check-skills.sh, to validate changes during the report generation process. - [PROMPT_INJECTION]: The skill processes untrusted data from external financial websites and filings, creating a surface for indirect prompt injection.
- Ingestion points: Financial data and news fetched from sources like Yahoo Finance, Bloomberg, and SEC filings.
- Boundary markers: The skill instructs to label missing data as
暂无可靠数据but does not define strict delimiters or instructions to ignore embedded commands within the fetched content. - Capability inventory: The agent can write to the local filesystem (research/daily-reports/, research/targets/) and execute repository scripts.
- Sanitization: There is no explicit requirement for sanitizing or escaping the data retrieved from external sources before its inclusion in the HTML report.
Audit Metadata