algo-options
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted input from user arguments and local configuration files, which could potentially be used to influence the generated strategy code.\n
- Ingestion points:
$ARGUMENTS(template, underlying, expiry-date) and local configuration files likealgo-expert/rules/options-execution.mdandalgo-expert/rules/assets/<template>/strategy.py.\n - Boundary markers: None; the skill does not use specific delimiters to separate user input from the rest of the prompt logic.\n
- Capability inventory: The skill is configured with
Read,Write,Edit,Bash,Glob, andGreptools.\n - Sanitization: No validation or sanitization of user-supplied parameters is implemented before they are used in the code generation process.\n- [DYNAMIC_EXECUTION]: The skill generates executable Python scripts by copying and modifying local templates at runtime.\n
- Evidence: Instructions direct the agent to "Create
strategies/<template>_<underlying>/and copy + customize" strategy templates, incorporating variables such asUNDERLYING,LOTS, andSL_MULTIPLIERdirectly into new.pyfiles.
Audit Metadata