pine-script

Pass

Audited by Gen Agent Trust Hub on May 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a coding assistant focused on generating and analyzing domain-specific language (Pine Script). It does not utilize any sensitive tools, perform network operations, or access the host file system.
  • [PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests user-provided code for analysis in its Debugger and Optimiser modes.
  • Ingestion points: User-pasted Pine Script code in SKILL.md (Modes #2, #3, #4, and #6).
  • Boundary markers: None explicitly defined to isolate untrusted user code from system instructions.
  • Capability inventory: The skill possesses no dangerous capabilities; it lacks network access, file system write permissions, and the ability to execute shell commands or subprocesses.
  • Sanitization: No validation or sanitization is performed on user inputs.
  • Risk assessment: Despite the lack of boundaries, the impact is negligible because the skill's environment is restricted to generating text-based code for external use on the TradingView platform.
Audit Metadata
Risk Level
SAFE
Analyzed
May 15, 2026, 05:40 PM
Security Audit — agent-trust-hub — pine-script