openalgo-chart-terminal

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical integration guide for building complex trading UIs using the openalgo-charts library. The instructions focus on chart orchestration, data synchronization, and UI state management.
  • [DATA_EXPOSURE]: The skill explicitly promotes secure credential management. Rule 4 in the document mandates that API keys should never be committed to source code and should instead be managed via environment variables.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface by ingesting external market data through live feeds. However, it provides validation mechanisms for user-supplied parameters to mitigate common input issues.
  • Ingestion points: External data enters the system through OpenAlgoLiveDataFeed and subscribeDepth as described in SKILL.md.
  • Boundary markers: None explicitly defined for the WebSocket/REST data stream content.
  • Capability inventory: The skill is granted Bash access in allowed-tools and includes logic for executing financial trades via an OrderEngine.
  • Sanitization: The skill recommends validating user-provided configuration using isValidTimezone and isKnownInterval to prevent processing of malformed or unexpected codes.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 02:54 AM