journal-pattern-analyzer
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted user input in the form of trade logs and journal notes, which creates a surface for indirect prompt injection attacks. \n
- Ingestion points: User-provided trade logs and journal entries requested in SKILL.md. \n
- Boundary markers: The instructions lack specific delimiters or warnings to ignore instructions embedded within the user data. \n
- Capability inventory: The skill utilizes Python code execution for statistical functions (expectancy, kelly_fraction) as defined in references/calculation-helpers.md. \n
- Sanitization: No sanitization or input validation procedures are described for the journal content. \n- [COMMAND_EXECUTION]: The skill executes Python code within the agent environment to process journal statistics using local helper functions located at skills/_lib/calculations.py.
Audit Metadata