regime
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources, which constitutes a surface for potential prompt injection. Ingestion points: The skill accepts user-supplied CSV price files and fetches ticker history through yfinance. Boundary markers: Output is constrained to a structured JSON format, which helps isolate data from instructions. Capability inventory: The skill executes a local Python script (
markov_regime.py) to perform statistical modeling. Sanitization: The tool primarily expects numeric price series, which naturally limits the injection surface. - [COMMAND_EXECUTION]: The skill documentation provides instructions for running its analysis script via
uv run, which is a standard execution pattern. - [EXTERNAL_DOWNLOADS]: The skill uses the
yfinancepackage to fetch market data from Yahoo Finance, which is recognized as a well-known and reputable service.
Audit Metadata