agent-shark-mindset
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill automatically ingests data from external sources, which could contain malicious instructions designed to influence the agent's behavior.\n
- Ingestion points: The agent performs daily scans of public financial data from the Reddit API (e.g.,
/r/algotrading.json), Polymarket's public CLOB API, and general web search results for narrative analysis as described in the Mode 1 and Mode 2 sections ofSKILL.md.\n - Boundary markers: The instructions do not define delimiters or specific 'ignore instructions' warnings when passing external content to the language model for scoring or summarization.\n
- Capability inventory: The skill is authorized to post formatted messages to Telegram channels and write to various directories in the local workspace (e.g.,
/workspace/CASHFLOW/,/workspace/STRATEGY/), providing a target for manipulation via injected instructions.\n - Sanitization: No explicit logic is provided for sanitizing, filtering, or validating the text retrieved from external APIs before it is incorporated into the agent's reasoning process.
Audit Metadata