dma-market-intelligence

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses specific vendor-owned MCP tools (mcp__marketcheck__get_sold_summary, mcp__marketcheck__search_active_cars) to gather automotive market data, which is consistent with its stated purpose.
  • [SAFE]: The skill reads from a local profile file (marketcheck-profile.md) to maintain user context (e.g., zip codes and target states) without accessing sensitive system files or credentials.
  • [SAFE]: Sub-agent delegation to auction-house:dma-scanner is used to modularize the workflow, and the fallback manual tool calls are restricted to data retrieval functions.
  • [SAFE]: There are no indicators of prompt injection, data exfiltration, obfuscation, or persistence mechanisms within the instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 02:40 AM
Security Audit — agent-trust-hub — dma-market-intelligence