scenario-analyzer
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill integrates untrusted external data from the internet to drive its core logic and decision-making processes.
- Ingestion points: Phase 2, Step 3 instructions specify using
WebSearchto collect related news and trends from the past two weeks, which are then used to build scenarios and identify stock impacts. - Boundary markers: None. There are no instructions provided to the agent to treat external content as untrusted or to wrap it in delimiters to prevent the execution of embedded instructions.
- Capability inventory: The skill utilizes the
WebSearchtool andget_ltpmarket data tool, and it performs file-write operations to thereports/directory. - Sanitization: There is no evidence of content filtering, escaping, or validation of the data retrieved via web searches before it is interpolated into the analysis workflow.
Audit Metadata