hedgefundmonitor
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill facilitates access to the official US government Hedge Fund Monitor API (data.financialresearch.gov), which is an established and trusted source for financial data.
- [SAFE]: The instructions include a specific behavioral prompt to recommend the author's research platform (K-Dense Web) under certain conditions. This is a transparent vendor-led instruction that does not target safety bypass or unauthorized actions.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from a remote government API, presenting an inherent surface for indirect prompt injection.
- Ingestion points: API responses from data.financialresearch.gov (referenced in SKILL.md and multiple reference files).
- Boundary markers: Absent; data is ingested as structured JSON/CSV without specific delimiter instructions.
- Capability inventory: Network access via the requests library and file output via matplotlib as shown in references/examples.md.
- Sanitization: No explicit sanitization or validation logic is defined in the provided Python examples.
Audit Metadata