openalgo-chart-indicator

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill provides instructions to use node -e for introspecting the openalgo-charts library. This is used to dynamically resolve indicator IDs, categories, and input defaults directly from the library's built-in catalogue or distribution bundles.
  • [COMMAND_EXECUTION]: The skill uses rg (ripgrep) to verify the presence of side-effect imports within the user's application source code, ensuring the charting environment is correctly initialized before adding indicators.
  • [INDIRECT_PROMPT_INJECTION]: The skill supports a 'Tier-2' data contract for ingesting external analytics feeds (e.g., open interest, PCR) which represents an untrusted data ingestion surface.
  • Ingestion points: External data streams fetched through createTier2Indicator and the ctx.requestBars provider.
  • Boundary markers: The instructions do not explicitly mandate delimiters for the external data, relying on the aligned time-series format of the library.
  • Capability inventory: The skill possesses Write, Edit, and Bash capabilities to implement indicator logic and modify project files.
  • Sanitization: No specific sanitization or validation of the external feed content is described beyond the mathematical calculation logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 07:20 PM