crypto-research

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructions describe executing a local shell script (scripts/setup-output-dir.sh) to create a timestamped directory structure and uses the Task tool to orchestrate parallel agent execution. It also utilizes the date command for timestamp generation.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as a research aggregator that fetches data from the web using WebSearch and WebFetch. This creates a vulnerability surface where malicious instructions embedded in web content could potentially influence the downstream specialized agents. * Ingestion points: External market data and news are ingested via WebSearch and WebFetch tools as described in the research capabilities. * Boundary markers: The documentation does not specify the use of clear delimiters or instructions to isolate fetched content from agent instructions. * Capability inventory: The skill environment includes powerful tools such as Bash (shell execution), Write (file system access), and Task (sub-process orchestration). * Sanitization: There is no evidence of content sanitization or validation before the fetched data is passed to the specialized agents for analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 05:42 AM