trading-strategist
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill aggregates market sentiment from external cryptocurrency RSS news feeds to inform trading strategies.
- Ingestion points: Aggregated sentiment data from third-party RSS feeds is used as a core component for strategy generation (
SKILL.md). - Boundary markers: No explicit boundary markers or instructions to ignore embedded prompts in the sentiment data were found in the provided files.
- Capability inventory: The skill uses Python scripts to process data and can fetch real-time market data via API helper scripts (
SKILL.md,scripts/calculate_ta.py). - Sanitization: There is no evidence of sanitization or filtering for the external sentiment text before it is processed by the agent.
- [SAFE]: The technical analysis script (
scripts/calculate_ta.py) performs standard mathematical calculations on numerical market data provided via standard input and does not exhibit dangerous behaviors like network access or file system modification.
Audit Metadata