journal-pattern-analyzer

Pass

Audited by Gen Agent Trust Hub on Mar 22, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The skill processes untrusted user input in the form of trade logs and journal notes, which creates a surface for indirect prompt injection attacks. \n
  • Ingestion points: User-provided trade logs and journal entries requested in SKILL.md. \n
  • Boundary markers: The instructions lack specific delimiters or warnings to ignore instructions embedded within the user data. \n
  • Capability inventory: The skill utilizes Python code execution for statistical functions (expectancy, kelly_fraction) as defined in references/calculation-helpers.md. \n
  • Sanitization: No sanitization or input validation procedures are described for the journal content. \n- [COMMAND_EXECUTION]: The skill executes Python code within the agent environment to process journal statistics using local helper functions located at skills/_lib/calculations.py.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 22, 2026, 07:05 AM
Security Audit — agent-trust-hub — journal-pattern-analyzer