macro-event-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which serves as a potential attack surface for indirect prompt injection.
- Ingestion points: The skill ingests user-provided materials such as transcripts, platform notes, and event lists (SKILL.md), as well as JSON responses from external financial APIs (references/providers/fmp.md, references/providers/tradingeconomics.md).
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the processing logic.
- Capability inventory: The skill's capabilities are limited to data retrieval, analysis, and text generation. No dangerous operations like file system writes or code execution are present.
- Sanitization: No sanitization or validation of the ingested external content is described.
- [EXTERNAL_DOWNLOADS]: The skill is designed to fetch economic event data from external services.
- Evidence: The skill references and provides instructions for fetching data from FinancialModelingPrep (financialmodelingprep.com) and TradingEconomics (api.tradingeconomics.com), which are well-known financial data providers.
- [COMMAND_EXECUTION]: The skill provides specific command-line instructions for the agent to execute.
- Evidence: Templates for
curlcommands are provided inreferences/providers/fmp.mdandreferences/providers/tradingeconomics.mdto retrieve JSON data from remote APIs.
Audit Metadata