master-trading-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection due to its processing of external, untrusted data to influence trading decisions.
- Ingestion points: Untrusted data enters the workflow via
news-intelligence(Phase 2.1) andsocial-sentiment-scraper(Phase 3.1) which pull from headlines, Twitter/X, and Reddit. - Boundary markers: The workflow does not explicitly define delimiters or instructions to ignore embedded commands within the ingested text.
- Capability inventory: The agent has the ability to execute trades via
mt5-integrationand send outbound data viadiscord-webhookandtelegram-bot. - Sanitization: No specific sanitization or filtering logic is described for the external content before it is used to generate bias or signals.
- [EXTERNAL_DOWNLOADS]: The workflow involves integration with several well-known third-party services including MetaTrader 5, Discord, Telegram, and Notion. These integrations are used for trade execution, alerting, and data synchronization, which are standard operations for a trading orchestration skill.
Audit Metadata