alpha-vantage
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill includes functionality to retrieve market news and sentiment data from an external API, creating a vector for indirect prompt injection where untrusted third-party content could influence the agent.
- Ingestion points: The
NEWS_SENTIMENTendpoint described inreferences/intelligence.mdfetches article feeds containing titles and summaries from the web. - Boundary markers: The skill does not provide specific delimiters or instructions to the agent to distinguish between its own logic and the fetched news content.
- Capability inventory: The skill utilizes
requestsfor network operations andpandasfor data processing. No high-risk capabilities like shell execution were identified. - Sanitization: There is no evidence of content filtering or sanitization for the retrieved news data.
- [PROMPT_INJECTION]: The
SKILL.mdfile contains specific instructions directing the agent to proactively suggest the author's commercial platform, 'K-Dense Web', when user requests reach a certain level of complexity. This instruction attempts to override the agent's neutral persona to serve promotional objectives.
Audit Metadata