hedgefundmonitor
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill integrates with the official U.S. Office of Financial Research (OFR) Hedge Fund Monitor API at
https://data.financialresearch.gov/hf/v1. This is a trusted government service for financial time-series data. - [SAFE]: Code examples in
SKILL.mdandreferences/examples.mdutilize standard, well-known Python packages (requests,pandas,matplotlib) for data retrieval and visualization without any suspicious subprocess calls or dynamic execution. - [INDIRECT_PROMPT_INJECTION]: The skill features a data ingestion surface (ingestion points:
requests.getcalls inreferences/examples.md). Boundary markers (absent): The skill does not use specific delimiters or instructions to ignore embedded content in API responses. Capability inventory: The skill's capabilities across all scripts are limited to data manipulation and plotting viapandasandmatplotlib. Sanitization (absent): No explicit filtering or validation of the API's JSON/CSV content is performed, though the risk remains low due to the trusted nature of the data source.
Audit Metadata