market-analyst

Pass

Audited by Gen Agent Trust Hub on May 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill configures a 'market-researcher' sub-agent in references/market-researcher.md with access to the Bash tool. This is intended for processing market statistics and managing data collected from official sources.
  • [EXTERNAL_DOWNLOADS]: The skill retrieves information from established and well-known Korean statistical and corporate data portals, including DART (Financial Supervisory Service), KOSIS (Statistics Korea), and Naver Data Lab.
  • [DATA_EXPOSURE]: The skill performs file system operations within a dedicated _workspace/ directory to manage the lifecycle of market research reports, including industry analysis and competitor profiles.
  • [PROMPT_INJECTION]: The skill processes data from external websites, which represents a surface for indirect prompt injection.
  • Ingestion points: Competitive data, news reports, and official filings fetched via web search in references/market-researcher.md.
  • Boundary markers: The instructions do not explicitly utilize boundary markers or isolation prompts for external content.
  • Capability inventory: The sub-agent possesses Bash execution, file read/write access, and web search capabilities.
  • Sanitization: No explicit sanitization or filtering of external content is documented before the data is processed for insights.
Audit Metadata
Risk Level
SAFE
Analyzed
May 17, 2026, 08:11 PM
Security Audit — agent-trust-hub — market-analyst