openalgo-chart-indicator
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill provides instructions to use
node -efor introspecting theopenalgo-chartslibrary. This is used to dynamically resolve indicator IDs, categories, and input defaults directly from the library's built-in catalogue or distribution bundles. - [COMMAND_EXECUTION]: The skill uses
rg(ripgrep) to verify the presence of side-effect imports within the user's application source code, ensuring the charting environment is correctly initialized before adding indicators. - [INDIRECT_PROMPT_INJECTION]: The skill supports a 'Tier-2' data contract for ingesting external analytics feeds (e.g., open interest, PCR) which represents an untrusted data ingestion surface.
- Ingestion points: External data streams fetched through
createTier2Indicatorand thectx.requestBarsprovider. - Boundary markers: The instructions do not explicitly mandate delimiters for the external data, relying on the aligned time-series format of the library.
- Capability inventory: The skill possesses
Write,Edit, andBashcapabilities to implement indicator logic and modify project files. - Sanitization: No specific sanitization or validation of the external feed content is described beyond the mathematical calculation logic.
Audit Metadata